Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/02/2024, 21:32

General

  • Target

    86ee21fabe7a9734a3f0ffce55edf2cb.exe

  • Size

    635KB

  • MD5

    86ee21fabe7a9734a3f0ffce55edf2cb

  • SHA1

    21c6877f4891cbb68ab840b3b58dd3c658028b47

  • SHA256

    5d985de1e12a987f5afc2fa9d85fa0074fc5b07a5f385c1348a075c9ff861260

  • SHA512

    5496390081db357097258b0aef23b190e43718a88c85a49cb242256897badf03cb00b5a1874b6ca7856bcadb49a6c16fdf012960d690eb49ce0fec8f54eca35b

  • SSDEEP

    12288:Ab5V9mB1grTQyiFTHFvNZKDs8cZRpqGjm2K010f:uV9c67iFTlv+5cjtHK010f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\86ee21fabe7a9734a3f0ffce55edf2cb.exe
    "C:\Users\Admin\AppData\Local\Temp\86ee21fabe7a9734a3f0ffce55edf2cb.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:1144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1144-0-0x0000000000400000-0x00000000004C2000-memory.dmp

    Filesize

    776KB

  • memory/1144-1-0x00000000005F0000-0x00000000005F2000-memory.dmp

    Filesize

    8KB

  • memory/1144-4-0x0000000000400000-0x00000000004C2000-memory.dmp

    Filesize

    776KB

  • memory/1144-5-0x00000000023B0000-0x00000000023B2000-memory.dmp

    Filesize

    8KB

  • memory/1144-21-0x0000000000400000-0x00000000004C2000-memory.dmp

    Filesize

    776KB