Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04/02/2024, 02:39
General
-
Target
8e0309e416e9924f3c6013fb367ecf9c.exe
-
Size
82KB
-
MD5
8e0309e416e9924f3c6013fb367ecf9c
-
SHA1
f972aa20a7431ec248c0ff0a787a5f0000493f0d
-
SHA256
0a18fcc6b20087c744e547e2351c938d3a169de183ec68882d80af7943298504
-
SHA512
2f4fb4db927e6f1036edccdd9d3ddffc566a62db1562a5bdb041934b38cf734d0b0402992c25b5355868186f93238d7c8516c5c3c931e2641aa4c79644577924
-
SSDEEP
1536:goPa5VpKPtAylAVRzrTBq7nW/O1o0U5obXf2UUK7Q4UaI:RijpeG0AVRzrT0DKOKncf2pQXUaI
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exe"C:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exeC:\Users\Admin\AppData\Local\Temp\8e0309e416e9924f3c6013fb367ecf9c.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
75KB
MD5bbfe057729efec26c83973ea1c181273
SHA1aa1a42a5a741be9f3df437a7a0d31d53c2c3e40a
SHA2564208263ed4ff18997c3e15493622a0c2699c4dc79810914974af83a280bf98b8
SHA5121b22d63f466a85ff7b712f6ddf8990e769c933b80487665ce712beaa551a01f1ad7d9bfa0b8edac98fdfe07f3f64016948f6ea2b35e72f89930bdecb364757eb
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB