Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 06:50

General

  • Target

    d579033a4e2f90a6d1616b21f6846908.exe

  • Size

    1.8MB

  • MD5

    d579033a4e2f90a6d1616b21f6846908

  • SHA1

    28d51a791e00b4a7c1e5cbced08f69dc7e9f3ced

  • SHA256

    03cd83a2f22333eefcf7cdbb7d295382c363e089f6d653a74a1a3f39bf96f377

  • SHA512

    ba2272d57593f37b02d449be3a2759ba1ab6ee0a5c395ec84892935900ccee82b74587f181f8365d5e8ebc0f952e004b70522203437521c79294eb9b541b0ca0

  • SSDEEP

    24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqy:SCqm2Jpr0nNM7Dus7Nxf

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d579033a4e2f90a6d1616b21f6846908.exe
    "C:\Users\Admin\AppData\Local\Temp\d579033a4e2f90a6d1616b21f6846908.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\7-Zip\7-zip32.dll

    Filesize

    1.8MB

    MD5

    3fc7e8e59d7e421a37dd3ef9c5306242

    SHA1

    9a20670a51556bc335ff25e4a4a949431f2a34b3

    SHA256

    495daf38bcb0cf2cbb62b9dac175398828f042d410635b787382afb18074f52f

    SHA512

    9f6fd0af5aa44327802262c93ee068e1158e322a75a54d2a61f0368bd33d50dba090927c2022113b7f3f921796e5705be0464ef190932d4ce930efc32a4b63cb

  • C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\msoshext.dll

    Filesize

    1.8MB

    MD5

    daff6e1957d56d013f15028d7d7e0bed

    SHA1

    7f9154068fffc2898f0daea989c023f32ab50332

    SHA256

    a9b648caa6dcffe5e7f01b3084a7be9529a45583e7de180df61d06a919719b87

    SHA512

    7e559f473257ef5e2ac8c508a69a652db27e86c1e6f19e67e7986ba994b75ba28cf38719a2a42729fcc3d4ca0e5b7a8833c93dc18b0663145da46455b0aa1ec1

  • memory/1648-0-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/1648-5605-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB

  • memory/1648-13437-0x0000000000400000-0x00000000005BA000-memory.dmp

    Filesize

    1.7MB