Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2024, 10:57

General

  • Target

    96fd780ccfa71873a8f87a230eefcb7d.exe

  • Size

    6KB

  • MD5

    96fd780ccfa71873a8f87a230eefcb7d

  • SHA1

    84df746f33e3385c9884176ab855136bf0397fe5

  • SHA256

    dcb5282a094f6858bf731b33712b9d607c97027b40bc9b027121a9b8c92bc2e8

  • SHA512

    054e7e56f0813b7ed2731bbb7afda4f1f934228487894e99d4788f44924277be3e77dd01362f3fda6f279682ea407520de5c92f662e711da2830b7b0a14c4df3

  • SSDEEP

    96:YFW6jBgtij8U/xnhL7sv/Sb6fvLnygofSAKzgMte9oLjRsTgVg:Kjn/bGC6fjnyhfSdgMte9oLj2TgVg

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\96fd780ccfa71873a8f87a230eefcb7d.exe
    "C:\Users\Admin\AppData\Local\Temp\96fd780ccfa71873a8f87a230eefcb7d.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in System32 directory
    PID:1444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\time

    Filesize

    2B

    MD5

    72b32a1f754ba1c09b3695e0cb6cde7f

    SHA1

    9109c85a45b703f87f1413a405549a2cea9ab556

    SHA256

    c837649cce43f2729138e72cc315207057ac82599a59be72765a477f22d14a54

    SHA512

    a2f4521450ffa4a0ec674bd6ee1bfe0e936c620adb73e0de1c16b0bd62fc03df62433f9a2ee12bd15c1fc21c888b5de9062311cba437c788ad530dc803366324