Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
13/03/2024, 06:33
General
-
Target
c535adc197507431213cad54fe60fa64.exe
-
Size
82KB
-
MD5
c535adc197507431213cad54fe60fa64
-
SHA1
b8bb39a62e924ad95a0c04df42d9c49580409a83
-
SHA256
d19fe1c918f093d4fcbd04d364ba1f5f73e8d659940e08c6c9825650513ca9b9
-
SHA512
912d547fbd914a1935f32716fb8755cc37a98c126c571cadfaf29081f231be0c31fc0f542c586e71c561dfbe1afb9985b9f238c7141cbbb6f7d5623b83cd7090
-
SSDEEP
1536:oThbuRkKAmJV8AqQ73x2uwNJd77Mnv2YOTWIzPt/MBle0myEI0NEoGHMcLHv:oThbskKAOV8AqQpwNJd77Mnv2tElVPE6
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c535adc197507431213cad54fe60fa64.exe"C:\Users\Admin\AppData\Local\Temp\c535adc197507431213cad54fe60fa64.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c535adc197507431213cad54fe60fa64.exeC:\Users\Admin\AppData\Local\Temp\c535adc197507431213cad54fe60fa64.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD508f3485d3c02d57263bb40874b4e71d4
SHA1630304ae844c93fea4db9629e9d84236addfd3b4
SHA2561114dc6e5528a239a37cf9c962a67d29eb73802df95ff6d979f34681fdc6e84e
SHA512b4b4528ef5f7dbb990616d859136cc09cd1afafc672ace62f7ba7672056802aed84dcea06daa0acee5d0171d8d2f4201a7e3689952e10692ee4a08b6b0991fdf
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB