Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

bf289df91b...23.exe

windows7-x64

6

bf289df91b...23.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    163s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/03/2024, 17:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bf289df91b6af785529c84c129a17e23.exe

  • Size

    50KB

  • MD5

    bf289df91b6af785529c84c129a17e23

  • SHA1

    fe498fc359fcaa83edae3a8ac50e64a5a71b0b64

  • SHA256

    4de7292c54a83272e25f02fc6418d11f5c3d70c15c5e8622b045f471b9d041bb

  • SHA512

    8fe5921286e8c4ed97394c03ed090005473eeb7d70b1952c3b635bfceb3c9318864e2fb52e212b814389dc3005ba0a654633be82f1ac5ac02da2a2e2fd9f781c

  • SSDEEP

    768:/EU07c92/EyTAYtxqfGNC0klI7C8yOvi3eIEqNZoly4IWnxZnksrHREUHQTJ:/g7wc1aGNC0klI7CPN3/dnoZIWnldHQ9

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf289df91b6af785529c84c129a17e23.exe
    "C:\Users\Admin\AppData\Local\Temp\bf289df91b6af785529c84c129a17e23.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:4516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4516-0-0x0000000000800000-0x000000000080A000-memory.dmp

    Filesize

    40KB

    Download