Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 17:32

General

  • Target

    512d36fd9319e32c04aac20ec70808df.exe

  • Size

    1.8MB

  • MD5

    512d36fd9319e32c04aac20ec70808df

  • SHA1

    fc41f3ccea4744140621aa18f84015b8b392361f

  • SHA256

    770e3770f7c11e163f98bd2508993e3c98a60a4aa11641073740593407f41d3c

  • SHA512

    4b1a5656545fb0ce7cd3787ae97f1610a83d30ddb511ba72039dd66b2a2551229dbb9b74e5bd24294842f1ea566fd9179dc9233b4fcef49d925d3b915b30fb37

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqM:SCqm2Jpr0nNM7Dus7Nx5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\512d36fd9319e32c04aac20ec70808df.exe
    "C:\Users\Admin\AppData\Local\Temp\512d36fd9319e32c04aac20ec70808df.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:1532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll

    Filesize

    929KB

    MD5

    9affe27884386a2b7313b90ab9f1f2cc

    SHA1

    d818bc9b365d436a7675189160460769a941d7ea

    SHA256

    a416d45e8d4572ed29577fd78e1e858d8d58eac626d36f28c9c2ac44982a1b50

    SHA512

    cae0b8ab6551dbdf3fb3180380d83aba817edc4f54ecb0b36ed22ced15a991a800476beed39089cd39460351ebb411d16f9988b98222793c0f8664b9f15a5f8b

  • memory/1532-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/1532-6203-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/1532-13405-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB