Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/01/2024, 22:45

General

  • Target

    54c99d4bc065d1ec9d246b42b8c0ad51.exe

  • Size

    354KB

  • MD5

    54c99d4bc065d1ec9d246b42b8c0ad51

  • SHA1

    853aa796fbd6e3d74c7e0d52bc43a44531298cc7

  • SHA256

    e1a6143c9ece65cdb1bf19f7f7bcf44aac18913591e34f50093ce6f0e9293775

  • SHA512

    3a457be1b43220062bbc83fc5e84e9b7171a369534a0e180fe42dfb404b5a9ec833dacfdd9f4f6e6510356d53a37d19fe55c1035efed7c97b06f5c1ae7a5f21a

  • SSDEEP

    6144:P+fLwt7EaIWAgP4OKKslXUHcQnZ0yApWq1ApqmNPIb:P+DA41TticQna6PIb

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 4 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54c99d4bc065d1ec9d246b42b8c0ad51.exe
    "C:\Users\Admin\AppData\Local\Temp\54c99d4bc065d1ec9d246b42b8c0ad51.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2872
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2872 -s 1020
      2⤵
      • Program crash
      PID:4616
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 2872 -ip 2872
    1⤵
      PID:1172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\7-Zip\7-zip.chm

      Filesize

      467KB

      MD5

      c5133d5994c3513b3d10d8292d590f68

      SHA1

      d1d793721282351dcd1198e4c06e0a992a868ebd

      SHA256

      368eb4f8a8a7878c450892f010faff6f1f3db9029683f0c08eb343fd1554e4cf

      SHA512

      3a6cd4db813582ddca37b88b0bb98e8121c9be285eb6c30de60bb400740542d4afd9608da13084119bda32b33406096e257f2439d9dc0992bd541bb25ec2e904

    • C:\Program Files\Java\jre-1.8\bin\glass.dll

      Filesize

      5B

      MD5

      b5b682b742431a52ea8b17c72ad9c572

      SHA1

      326320f469235708c59f678c9a7357dca552d306

      SHA256

      30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

      SHA512

      4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

    • memory/2872-0-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB

    • memory/2872-1986-0x0000000000400000-0x000000000040A000-memory.dmp

      Filesize

      40KB