Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
7s -
max time network
15s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26/03/2024, 10:23
General
-
Target
deeef6cb6bd552fac36dfc1b9c3e7dac.exe
-
Size
2.0MB
-
MD5
deeef6cb6bd552fac36dfc1b9c3e7dac
-
SHA1
9325da20ad2a14f849c6be51df12689b0132e196
-
SHA256
e0db3439a5592b527db3582a8a543d788b5ae67591f92f9c7ad94fc8245ae645
-
SHA512
201d34c491baee9e9007887c6d35f373f5276952243287095cf68c5e060acbedf361d0bb66b48c77d57ea4a7b56b699c38f8fd7aad6788a6761b0f9e7322a91e
-
SSDEEP
49152:fCTQ5VAM8Lt0EbPhFSTs09Os4Lwy/Rhxl6uuVBpTEmVSr157RbuSTs09Os4Lwy/S:fCEVj8Lt0EbPhFSTt9Os4Ltbxl6RzQmk
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\deeef6cb6bd552fac36dfc1b9c3e7dac.exe"C:\Users\Admin\AppData\Local\Temp\deeef6cb6bd552fac36dfc1b9c3e7dac.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\deeef6cb6bd552fac36dfc1b9c3e7dac.exeC:\Users\Admin\AppData\Local\Temp\deeef6cb6bd552fac36dfc1b9c3e7dac.exe2⤵
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD5c773c590fe7ac93b2cb063b56458f537
SHA141d558762de64abbade5400f7763bc9e9597e905
SHA256b6a10915344038824af61333f36ca69c68c9e91e3b0cf1b316350dad1d6c66c3
SHA5124a580af2b792c6d20311dfeab2e57682e7b8e4d3f419507bb22ddbf5fc15b8b688abd5cb92356b01126aee848b62d172bcd181e1e6387ae671fa7deed792733c
-
Filesize
504KB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
428KB
-
Filesize
504KB
-
Filesize
428KB