Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/01/2024, 11:46

General

  • Target

    58d7205aa7d7a91951aea650b7386b10.exe

  • Size

    226KB

  • MD5

    58d7205aa7d7a91951aea650b7386b10

  • SHA1

    c5697766a134353ca3acd96ce33a9c11302481f3

  • SHA256

    cab3d4dedeb6f1c6af824e3127512fd059fcefa1bb738eaceba38d876997989e

  • SHA512

    1ec37066e373452a2a1a6ced3081f778d8e22973fc66780e82dcb9fb8267c5692ccfc14de2c14e3489b8dbc90a035b33d0c3e7f321d0c0f9a822f2241c4f339c

  • SSDEEP

    6144:eOZqn0GakjRKTvamhuqdjc/2dpCp+JOy+Uj+:ohak1qvaJGXCP1Ui

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\58d7205aa7d7a91951aea650b7386b10.exe
    "C:\Users\Admin\AppData\Local\Temp\58d7205aa7d7a91951aea650b7386b10.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1400-0-0x0000000000620000-0x0000000000638000-memory.dmp

    Filesize

    96KB

  • memory/1400-1-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-4549-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-10220-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-16048-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-17828-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-25294-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-32117-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-38708-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-44127-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-51687-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-59352-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-67621-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-75345-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-83579-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-90014-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB

  • memory/1400-97915-0x0000000000400000-0x0000000000440000-memory.dmp

    Filesize

    256KB