Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18/01/2024, 20:21
General
-
Target
65f2db5e3b1106f4199e97d27523d014.exe
-
Size
308KB
-
MD5
65f2db5e3b1106f4199e97d27523d014
-
SHA1
ceab4507d7f3928ae6a16e62e7687ec51e1e7b6b
-
SHA256
7fb42aa046e609fea1e2619140984a2f5b2afd6204505e85608dc9338d20ac3b
-
SHA512
30c662074936490fea111e86f85676e39297063d10dc21a84f13683ffdfd2161a02443b8f5ce25ca480b530b73d5cbc2b7e780eb48b9a3c99f37223bee202141
-
SSDEEP
6144:f60yLW4Z/OiwEdzFduwv/QVXbRfzEesSksOW7vQ6gS5IzVRD3OfoS:f60ya4MEdKNf/sDsOW7vQXS2zVRD3OfZ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65f2db5e3b1106f4199e97d27523d014.exe"C:\Users\Admin\AppData\Local\Temp\65f2db5e3b1106f4199e97d27523d014.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\RAbc.exeC:\Windows\SysWOW64\RAbc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
308KB
MD565f2db5e3b1106f4199e97d27523d014
SHA1ceab4507d7f3928ae6a16e62e7687ec51e1e7b6b
SHA2567fb42aa046e609fea1e2619140984a2f5b2afd6204505e85608dc9338d20ac3b
SHA51230c662074936490fea111e86f85676e39297063d10dc21a84f13683ffdfd2161a02443b8f5ce25ca480b530b73d5cbc2b7e780eb48b9a3c99f37223bee202141
-
Filesize
860KB
-
Filesize
4KB
-
Filesize
860KB
-
Filesize
860KB
-
Filesize
4KB
-
Filesize
860KB