Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

52038c38dc...9a.exe

windows7-x64

1

52038c38dc...9a.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    168s
  • max time network
    315s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/03/2024, 22:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe

  • Size

    355KB

  • MD5

    3347325a293ac4af7eddaa3f46580b93

  • SHA1

    1c650aa9951ea05b4ba5c56520dd30ce889cc319

  • SHA256

    52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a

  • SHA512

    83355884c60abeb5c66a9eff60d72648d563c372cc36e9e7ff9146230244ab93ad0c5b353c81e1819870b45e09a8ba6cc7a1ad4aa8b81a56310c5a44317742a2

  • SSDEEP

    6144:g2qezd2ab1/RuHk+M3k8M3W7XomjOJCqshrOlumY6DMIewgxQfqgsb:gf2R/EEkCQFYDwRq7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe
    "C:\Users\Admin\AppData\Local\Temp\52038c38dc147fbb2ae03a8569cf07cb2d1d29c14d7fa30215757afd3076c89a.exe"
    1⤵
      PID:1344
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2296

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1344-0-0x0000000000FC0000-0x000000000102D000-memory.dmp

        Filesize

        436KB

        Download

      • memory/1344-1-0x0000000000FC0000-0x000000000102D000-memory.dmp

        Filesize

        436KB

        Download