Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

MLvUvEDOEu...DI.exe

windows7-x64

1

MLvUvEDOEu...DI.exe

windows10-1703-x64

1

MLvUvEDOEu...DI.exe

windows10-2004-x64

1

MLvUvEDOEu...DI.exe

windows11-21h2-x64

1

Resubmissions

09/01/2024, 02:53

240109-ddqyzschdk 6

09/01/2024, 02:51

240109-dcejkacghn 3

09/01/2024, 02:48

240109-damr6acgbr 3

Analysis

  • max time kernel
    1s
  • max time network
    145s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231222-en
  • resource tags

    arch:x64arch:x86image:win11-20231222-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    09/01/2024, 02:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MLvUvEDOEuKLTktpDCrXoFfYVFbxTEfqhGQYVnKCVdocogSLzLRgZCfRZLPrHCKVfddmhcuolTJEiAOTVsCNgjIcNKMUJOqsGRDI.exe

  • Size

    374KB

  • MD5

    9de24a3783de7801078ce41dde985fe3

  • SHA1

    5c50528ec983cc2ef5434505e9c88f383f34664f

  • SHA256

    091cef11e74e54f8036895cacaf381dd44d4150f30e1433d5a93dbe0d89b6c3c

  • SHA512

    4fbe35b80443656d262cdd4f9202ec0b2ea72404a39e076df58c6a84962ac0b8ca8103c719d536a4fc89fcb9fddb68ed1c312bb974dadfeec4d5322acd17b959

  • SSDEEP

    6144:Pcm6lZ+F3X+ffm8Qkt93qMMRoeYu4SCUXv0guGqwtI1r0f2OK4grp5/vlSaSMxi:PcmISXGmfktWGu4Mc7FQMxi

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\MLvUvEDOEuKLTktpDCrXoFfYVFbxTEfqhGQYVnKCVdocogSLzLRgZCfRZLPrHCKVfddmhcuolTJEiAOTVsCNgjIcNKMUJOqsGRDI.exe
    "C:\Users\Admin\AppData\Local\Temp\MLvUvEDOEuKLTktpDCrXoFfYVFbxTEfqhGQYVnKCVdocogSLzLRgZCfRZLPrHCKVfddmhcuolTJEiAOTVsCNgjIcNKMUJOqsGRDI.exe"
    1⤵
      PID:1000
    • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClippingHost.exe
      "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClippingHost.exe" -ServerName:ScreenClipping.AppX6726kd2wrry6c6n8nc57a1zn08dmzmbt.mca
      1⤵
        PID:5004
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
        1⤵
          PID:3616

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1000-1-0x0000000074350000-0x0000000074B01000-memory.dmp

          Filesize

          7.7MB

          Download

        • memory/1000-0-0x0000000000650000-0x00000000006EA000-memory.dmp

          Filesize

          616KB

          Download

        • memory/1000-2-0x0000000004C20000-0x0000000004C21000-memory.dmp

          Filesize

          4KB

          Download

        • memory/1000-3-0x0000000005410000-0x0000000005420000-memory.dmp

          Filesize

          64KB

          Download

        • memory/1000-5-0x00000000054C0000-0x0000000005552000-memory.dmp

          Filesize

          584KB

          Download

        • memory/1000-4-0x00000000059D0000-0x0000000005F76000-memory.dmp

          Filesize

          5.6MB

          Download

        • memory/1000-6-0x0000000005440000-0x000000000544A000-memory.dmp

          Filesize

          40KB

          Download

        • memory/1000-7-0x0000000074350000-0x0000000074B01000-memory.dmp

          Filesize

          7.7MB

          Download

        • memory/1000-8-0x0000000005410000-0x0000000005420000-memory.dmp

          Filesize

          64KB

          Download