Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

12/01/2024, 05:35

240112-gactqsgcf6 7

12/01/2024, 05:30

240112-f7lx8sfdbm 7

12/01/2024, 05:25

240112-f4aqssfcej 7

Analysis

  • max time kernel
    134s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 05:25

General

  • Target

    手动安装说明.txt

  • Size

    868B

  • MD5

    ed0d8adaaac3753c9e031436f9cdeb65

  • SHA1

    712d08caf41f7df7b30cbe8c59f7bfd9e09b9577

  • SHA256

    c32b5ffbf72cecbd0b387500d63a2cfadde60d92799bd5622d5c1b07d6af0fbe

  • SHA512

    b71039406c709515e0fcb1d6b6b9ca0ca81ce2cc1c3b3d3edf9ca817b4fec0492c3c29e3fec771a454e04a952e03463516a077b1aa0854395f6c4c5e47d4261b

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\手动安装说明.txt
    1⤵
      PID:2636
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
      1⤵
        PID:1216
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k UnistackSvcGroup
        1⤵
          PID:1536

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1536-32-0x000001892EAE0000-0x000001892EAE1000-memory.dmp

          Filesize

          4KB

        • memory/1536-36-0x000001892EC20000-0x000001892EC21000-memory.dmp

          Filesize

          4KB

        • memory/1536-35-0x000001892EB10000-0x000001892EB11000-memory.dmp

          Filesize

          4KB

        • memory/1536-34-0x000001892EB10000-0x000001892EB11000-memory.dmp

          Filesize

          4KB

        • memory/1536-16-0x0000018926770000-0x0000018926780000-memory.dmp

          Filesize

          64KB

        • memory/1536-0-0x0000018926670000-0x0000018926680000-memory.dmp

          Filesize

          64KB