Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
193s -
max time network
303s -
platform
windows10-1703_x64 -
resource
win10-20240221-en -
resource tags
arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system -
submitted
15/03/2024, 04:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f.exe
Resource
win7-20240221-en
2 signatures
300 seconds
General
-
Target
d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f.exe
-
Size
6.5MB
-
MD5
908c4f8f4d940936b0877bcbc962f542
-
SHA1
4f29092711596c75e3fb337f4189f7f1d074f9e0
-
SHA256
d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f
-
SHA512
5030eba892ea3f907fc2f44e4073278a8477031b7eca9686fdfee7263f1ccee24791f474a134c762593be1b2df3cdbb8777910559b294af3a78754e3fcb7fb49
-
SSDEEP
98304:whX6bFxKxJGFNdnbCkRak2JEf6R0Fc5XJBb/X1qniFQKesVnqc8pA0kkqCYQmPM:whqxxKxa7mWXGzBbSiFXxVn70kLRQJ
Malware Config
Extracted
Family
risepro
C2
193.233.132.67:50500
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 204 d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f.exe 204 d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f.exe 204 d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f.exe 204 d059f4d04c9b70923961d638dcbf9988e76becbb3aa246da9aa888c608ecfa8f.exe