Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/03/2024, 16:22

General

  • Target

    c10b664de3417b271a60adbbb7f74405.exe

  • Size

    2.7MB

  • MD5

    c10b664de3417b271a60adbbb7f74405

  • SHA1

    993532bca3506f5a4afb8e3485f3fc3e92587825

  • SHA256

    1405db1dea1db54a0abc5d5f5e2a4d01619a50b79a1e6a0fc0783cbf5189a9bd

  • SHA512

    efe1e05b2a4200411930390578f673575841c85b5f21cfc88771129b6d70acfd04eff10e4f0c1b7995550b4a7039fc97a6140e3005386d3ef62cc67fcdd2fbf4

  • SSDEEP

    49152:W6KKJYRlKoEmgkVGWnf50/WjRr+ubKQYKPI7zjkDSZ9BSAG5KRldpOhnSJbBf7WY:W6KYelKoekVGWRxjRr03KA7ccQV52dpD

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c10b664de3417b271a60adbbb7f74405.exe
    "C:\Users\Admin\AppData\Local\Temp\c10b664de3417b271a60adbbb7f74405.exe"
    1⤵
    • Modifies system certificate store
    PID:4932
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4264 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1972

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE

      Filesize

      5B

      MD5

      5bfa51f3a417b98e7443eca90fc94703

      SHA1

      8c015d80b8a23f780bdd215dc842b0f5551f63bd

      SHA256

      bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128

      SHA512

      4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE

      Filesize

      398B

      MD5

      89dd3817c5eec5b401c22aa219345e55

      SHA1

      b00482e527e70a53697abb94599dfed59de0b7f9

      SHA256

      55f97159442bac90c56c07dd3e19da5f402043217f5444bc9a1e5cf6786d36d9

      SHA512

      e5db3a61a68dbcc1186458df52fbed2a6d4406efdb3d09220d18a9f72e2d71000341dc3560e15c14b8cb1bcd99c0bbd7a77ba10bfc0349601e1632e39c7a2922

    • memory/4932-0-0x0000000074E00000-0x00000000753B1000-memory.dmp

      Filesize

      5.7MB

    • memory/4932-1-0x0000000074E00000-0x00000000753B1000-memory.dmp

      Filesize

      5.7MB

    • memory/4932-2-0x0000000074E00000-0x00000000753B1000-memory.dmp

      Filesize

      5.7MB

    • memory/4932-3-0x0000000001930000-0x0000000001940000-memory.dmp

      Filesize

      64KB

    • memory/4932-9-0x0000000074E00000-0x00000000753B1000-memory.dmp

      Filesize

      5.7MB

    • memory/4932-27-0x0000000001930000-0x0000000001940000-memory.dmp

      Filesize

      64KB

    • memory/4932-29-0x0000000074E00000-0x00000000753B1000-memory.dmp

      Filesize

      5.7MB