Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/01/2024, 01:03

General

  • Target

    7e77833c4077c83ac581c50cf361390a.exe

  • Size

    1.8MB

  • MD5

    7e77833c4077c83ac581c50cf361390a

  • SHA1

    69b737fb806c30982c84c879e8af7e9e1a6e8ff2

  • SHA256

    18ca39f425eb1b6abb4a4c56b26acec996336b1d6e3a320e88e67c885b16de8c

  • SHA512

    f3940aba1b822fef5a5c3f3cbc90f484f84206e80666ce8a5683ebadea1365e977e958804a79cdffef13df8a6ebfe9a7aa140a13d1e2c19a232eed4f940fa9f0

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqd:SCqm2Jpr0nNM7Dus7Nxs

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e77833c4077c83ac581c50cf361390a.exe
    "C:\Users\Admin\AppData\Local\Temp\7e77833c4077c83ac581c50cf361390a.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll

    Filesize

    1.8MB

    MD5

    8ce8fed6bea938bd7df67cee1c834585

    SHA1

    2776ac3ad72dc229252590993fb5460e48c0563f

    SHA256

    a01036a4d9c7a5edc8b2d71260dde83df00edad8040f71f310f4e8f624559b81

    SHA512

    3ae2c723162c40ed2ba0b646756db67824ca21ecf1443aabe453da9627e62406dfe8468b76df0891cfbf224384932dd38f89e72d275b424c6b3b3cd537b55409

  • memory/2280-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/2280-6357-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/2280-13407-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB