Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/03/2024, 05:19

General

  • Target

    c7c9fa3ae0fc964b18e043c1f4e6c642.exe

  • Size

    235KB

  • MD5

    c7c9fa3ae0fc964b18e043c1f4e6c642

  • SHA1

    fd364240121c1943d0ae8ac2b74a494cc88c7229

  • SHA256

    8bc6e488d1675a71bf9aa9fcaac6f122ab67fa5fb2ef26b23770f188fa656555

  • SHA512

    5f69534a63eda766b5cd9ed24d9212e570c55d0affa040d3a7be83c83dd5af9518f0ea5732d1ce77ccbf88c0d3ccb884a58265f24e85c03532f2557d958742d3

  • SSDEEP

    6144:/CBhXHwtX9LgNcmOaaOLMlIdgoKTLHYSUV:/CsNOLMRTDMV

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • UPX packed file 15 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c7c9fa3ae0fc964b18e043c1f4e6c642.exe
    "C:\Users\Admin\AppData\Local\Temp\c7c9fa3ae0fc964b18e043c1f4e6c642.exe"
    1⤵
      PID:3972

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3972-0-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-1-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-2-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-3-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-4-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-5-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-6-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-7-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-8-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-9-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-10-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-11-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-12-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-13-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB

    • memory/3972-14-0x0000000000400000-0x0000000000487000-memory.dmp

      Filesize

      540KB