Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 08:24

General

  • Target

    DeskSpaceTrialSetup.exe

  • Size

    2.9MB

  • MD5

    7e558f6aeec33330fab187b65bb77c42

  • SHA1

    71484851c1663c1d9f731a23ca2a316d19b0ff47

  • SHA256

    c22672281be4efe5ca7f5af81c10a6ea47ada6952e08da17619bac3db4d50412

  • SHA512

    e9971ccdc9a6f5704395799fecaec51070cdad8fb46c79ad329d904107c08c5d1a21b19ce130da3331e627a5dc13f3f8383f3b70717fc2e757e35c48cc973ba4

  • SSDEEP

    49152:BlTFg4LkfRdFHHk2C04oPlFzUxom+c2rgKVoQ5s97UXfUZjwq6:BYHdFn0APlF8d2rN5A7LZ8q6

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\DeskSpaceTrialSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\DeskSpaceTrialSetup.exe"
    1⤵
    • Loads dropped DLL
    PID:1828

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1828-0-0x0000000000400000-0x00000000004FC000-memory.dmp

    Filesize

    1008KB

  • memory/1828-86-0x0000000000400000-0x00000000004FC000-memory.dmp

    Filesize

    1008KB