Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
19/01/2024, 04:54
General
-
Target
66c001a39715ab19fa2cea0c6992a737.exe
-
Size
82KB
-
MD5
66c001a39715ab19fa2cea0c6992a737
-
SHA1
979d6ffe1df5dd7e791620a6e193550ccd21351d
-
SHA256
d11ab68db7da63157627f189663620f839b15186f4a31767b09c51007dd978f8
-
SHA512
0f90098adafc9fa33d6915516ce2ac57e8faf49e6dc7997d0fd94f80d8674111d419452c0524dc872e0854355e15732db6e26e6ace162e37da1ce170f23e7906
-
SSDEEP
1536:F/gKlq/IESa2500HJRhMoDfRXhADiGWkk+HXv8x7Siq76qCpes86tuyGRXgq4:plGOW0pRhBfthAWAk+/8x+n76queCGG
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exe"C:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exeC:\Users\Admin\AppData\Local\Temp\66c001a39715ab19fa2cea0c6992a737.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD51411f5bd723e81d017d7d0f4d64f9ebb
SHA135a4159589dcd84b0f36e11bd5ade61ef9cb8386
SHA256ce85a6e3cb9dc7bbef0c4e37aaf4689900555bd1e4fad7d7474cc8b1b7755f22
SHA51254896d1821975ede2671d61add6a8c2d97a829387fe473b278d055d577cc9339e0e8f02c33aa1a3940734224f899ddc5304db8e6f87dbb09faef09c52c8540f6
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB