Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    186s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 01:01

General

  • Target

    4f2a46d37a49c4c133bb21020f53ec76.exe

  • Size

    110KB

  • MD5

    4f2a46d37a49c4c133bb21020f53ec76

  • SHA1

    2a9d6a8ce80c145c6a46a4abeb37c09cdbbea7fa

  • SHA256

    654c2a5cbc8d15687b03083418f7cf871ec250aa0e048ff07a65adb88bae3aef

  • SHA512

    0867d0e5affbb4c44fcd4f52ae5559b75e31a36c6123d99af68c190988ae04052d6f103c48b20c404c11e5c5e0499ddb2ec22995ab06bbd9b51238dedce278df

  • SSDEEP

    3072:AzW7GpD9VaPB7C/cfca1sMuf1/Dq42tOBNsYr94NW7:4W7MD92B7C/cfcaeMuhq8prAW

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 20 IoCs
  • Drops file in Windows directory 32 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4f2a46d37a49c4c133bb21020f53ec76.exe
    "C:\Users\Admin\AppData\Local\Temp\4f2a46d37a49c4c133bb21020f53ec76.exe"
    1⤵
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies registry class
    PID:3748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3748-0-0x00000000006E0000-0x00000000006E1000-memory.dmp

    Filesize

    4KB

  • memory/3748-3-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-4-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-5-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-6-0x00000000006E0000-0x00000000006E1000-memory.dmp

    Filesize

    4KB

  • memory/3748-8-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-9-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-10-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-12-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-13-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-14-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-15-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-17-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-18-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB

  • memory/3748-19-0x0000000000400000-0x0000000000455000-memory.dmp

    Filesize

    340KB