Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
25/02/2024, 03:50
Static task
static1
Behavioral task
behavioral1
Sample
c8d6f1e7b6d1ee1c14c455e132597aba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8d6f1e7b6d1ee1c14c455e132597aba.exe
Resource
win10v2004-20240221-en
General
-
Target
c8d6f1e7b6d1ee1c14c455e132597aba.exe
-
Size
412KB
-
MD5
c8d6f1e7b6d1ee1c14c455e132597aba
-
SHA1
010e95fa3cb1b248ae8196b41c6d01bf37803446
-
SHA256
59c7fb9866c5bc72599c78523715da9e3bda3ba6ea52542e956f6a34d06b2f15
-
SHA512
03f7058efa8914fd9acf5de847a8c5e4380b669532f1be77ee70b17c556e7ec0ebfbc5b169c5713610a7d11da052c8c6ab03d415a3075666e37f10cea199f86d
-
SSDEEP
12288:U6PCrIc9kph5XVmqhdtFN50GwrJDKIaSeDeGrI:U6QIcOh5Xvd32GxXr
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 2980 3BE0.tmp -
Executes dropped EXE 1 IoCs
pid Process 2980 3BE0.tmp -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 700 wrote to memory of 2980 700 c8d6f1e7b6d1ee1c14c455e132597aba.exe 86 PID 700 wrote to memory of 2980 700 c8d6f1e7b6d1ee1c14c455e132597aba.exe 86 PID 700 wrote to memory of 2980 700 c8d6f1e7b6d1ee1c14c455e132597aba.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8d6f1e7b6d1ee1c14c455e132597aba.exe"C:\Users\Admin\AppData\Local\Temp\c8d6f1e7b6d1ee1c14c455e132597aba.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:700 -
C:\Users\Admin\AppData\Local\Temp\3BE0.tmp"C:\Users\Admin\AppData\Local\Temp\3BE0.tmp" --pingC:\Users\Admin\AppData\Local\Temp\c8d6f1e7b6d1ee1c14c455e132597aba.exe A40EFB32D980AEAE19416DAC02711F571774CA063B5F5AE0FD1DB7BCEED5E0A7297FDB684A7469A6AA13304F7E09E2058FE5E66E95AEFBCEC42F4244B3CE44532⤵
- Deletes itself
- Executes dropped EXE
PID:2980
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
MD567e7476820b667e09b4a69dd16d35bd9
SHA1c2ba80475c08f87e365ad8933e2688f4bc93a695
SHA256902c5589173a846f851fca64baa7f57044bec526b7757b9608af3fbf65d987ed
SHA51231492e8e61aeae1aa3a11b098c343eb171ee0cd7fdcc898008baa690516f59ac737614b26b4d7e2cff3b1528cf436ed8bc3037a482050b338a4ae94a37c7e581