Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
106s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 20:42
Static task
static1
Behavioral task
behavioral1
Sample
f8c98ec774e028ee58028e00232a2c71.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f8c98ec774e028ee58028e00232a2c71.exe
Resource
win10v2004-20240226-en
General
-
Target
f8c98ec774e028ee58028e00232a2c71.exe
-
Size
1024KB
-
MD5
f8c98ec774e028ee58028e00232a2c71
-
SHA1
97cac0118bc98721d3139e4565bf311adadf7780
-
SHA256
78ed8d76e6abf51cc5744b16ea45a93ee8234321365d348774ddf4779a78b012
-
SHA512
d27609f924b74f75f4d9a29fcf0946e614369319bba36499aa40ab629e2a85248995d728a9632a27f667d3c320844f3a1ff32cd6c39d63645f3eefaba0570e1f
-
SSDEEP
24576:YaOsIRfTHLG2uj7ev2qEgLZmN1VUZmw3KNFosgTtKsHPsY2f1:YaOssPMSO0ZmXiZmw3KNFosgT3HPsYM1
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 4808 1921.tmp -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2448 wrote to memory of 4808 2448 f8c98ec774e028ee58028e00232a2c71.exe 95 PID 2448 wrote to memory of 4808 2448 f8c98ec774e028ee58028e00232a2c71.exe 95 PID 2448 wrote to memory of 4808 2448 f8c98ec774e028ee58028e00232a2c71.exe 95
Processes
-
C:\Users\Admin\AppData\Local\Temp\f8c98ec774e028ee58028e00232a2c71.exe"C:\Users\Admin\AppData\Local\Temp\f8c98ec774e028ee58028e00232a2c71.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2448 -
C:\Users\Admin\AppData\Local\Temp\1921.tmp"C:\Users\Admin\AppData\Local\Temp\1921.tmp"2⤵
- Executes dropped EXE
PID:4808
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2268 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:81⤵PID:3308
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
MD5e0337cdf6c3726c4227723f38ab2cdb7
SHA1311e64b5e051cf64a251b1b07867f9418a6af26a
SHA256ba676239d52c08ff5af4478fac55fc7a93d67cafc1914ce42262858155325334
SHA51200066b0d79cc0872235c50a2e1cf4f02359d4db65bc41cd89762515835ed5c28227b0d221cccfef41e99f199d9391e3d6024542689c47d9c315df92c6b4a8372