Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
4fe224c5f89a6c8af79cad37e64b0569.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4fe224c5f89a6c8af79cad37e64b0569.exe
Resource
win10v2004-20240226-en
General
-
Target
4fe224c5f89a6c8af79cad37e64b0569.exe
-
Size
287KB
-
MD5
4fe224c5f89a6c8af79cad37e64b0569
-
SHA1
7d175280212359df894b64f871313525840fab87
-
SHA256
cc4491b61a6f7fb63463401b464a925ca78470fc2bbd3182856dce1c4f8f3fed
-
SHA512
6e7a58abf18ca6e94d38740e6d5a5ec61c2608f0673918f1a176e3fcdfaedc00d1d498809f14f0b80bddbe23f0ccd81c9a6a6bc96a21bea06f7ac961ba109205
-
SSDEEP
6144:sOw14xM/grDmLuyau/CSOTag98aPRwI4A2SbGqJC:UnokuyJqhGaOA2SS
Malware Config
Signatures
-
Modifies AppInit DLL entries 2 TTPs
-
Executes dropped EXE 1 IoCs
pid Process 2232 ktyqhhb.exe -
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\ktyqhhb.exe 4fe224c5f89a6c8af79cad37e64b0569.exe File created C:\PROGRA~3\Mozilla\ixnvdrc.dll ktyqhhb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fe224c5f89a6c8af79cad37e64b0569.exe"C:\Users\Admin\AppData\Local\Temp\4fe224c5f89a6c8af79cad37e64b0569.exe"1⤵
- Drops file in Program Files directory
PID:3892
-
C:\PROGRA~3\Mozilla\ktyqhhb.exeC:\PROGRA~3\Mozilla\ktyqhhb.exe -arwhcpc1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:2232
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
287KB
MD5c83e8a34109d634187381efe446c9e4e
SHA16d3d903408e6cd2a4258bfd15ca7d78af71ddb86
SHA2563011a20f6b1b05a166cc10e1053ee7821ec95e765f5839e525005003b3ed2860
SHA5123de57c42dd53c72d4a11eacbd4bb7ce7618dfc7840ff4d24ae8864aae952e0b5eb0cec21047e7533dc1369756d5133c5a16fce3891ad7adbf8a4d3df1614cc93