Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    153s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/03/2024, 11:08

General

  • Target

    d35ac6a437a05f5799e24ff697ee0901.exe

  • Size

    1.8MB

  • MD5

    d35ac6a437a05f5799e24ff697ee0901

  • SHA1

    c210f65ec4f68163c487d96dff04415b33b80cb7

  • SHA256

    cbe50245ce47e8674c314e8613d99238d7b2ee3943a36ba5ad103219b34db985

  • SHA512

    f85abb3a9a6219c2282b7db4b02277efbf25e916834066ee46c62681663556630c894432c5192ae629365f35522abffa1d12dfd821cdbe1082ea2a9b040cc54b

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHM:SCqm2Jpr0nNM7Dus7Nx2s

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d35ac6a437a05f5799e24ff697ee0901.exe
    "C:\Users\Admin\AppData\Local\Temp\d35ac6a437a05f5799e24ff697ee0901.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2124
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4048 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:780

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files\7-Zip\7-zip32.dll

      Filesize

      88KB

      MD5

      55bc914494c2900105063f1daecacb14

      SHA1

      5ec78bee85b0c0b526d422768abd66ce1d964166

      SHA256

      66176b66e43d76545f7aff1a9273bebff85046989725c29571a7fb5a1d4079a2

      SHA512

      598d44ed7f58112c8634f9c8113c83c33daa647ca2ff047b5b370e2695681bc16e82e2c593e481d188d12eb1cc11b91096d744a8ea4acbf657b35e6154ec17c5

    • memory/2124-0-0x0000000000400000-0x00000000005BA000-memory.dmp

      Filesize

      1.7MB

    • memory/2124-550-0x0000000000400000-0x00000000005BA000-memory.dmp

      Filesize

      1.7MB