Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    11s
  • max time network
    48s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/04/2024, 20:23

General

  • Target

    2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe

  • Size

    173KB

  • MD5

    28a29eb3ba8879d946e7ad0895028f6a

  • SHA1

    7871fe5dd6d8c663c8bd73c52d40bad1f63fdb22

  • SHA256

    2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25

  • SHA512

    1102c0dae4f04991f4766d7bcd905d8f6b1e34a2544558df2a286397162e3d6bba6a63ae4ea5f67e9cda399c9235bd2f876c480e925a6cec9fa84368274f1ab6

  • SSDEEP

    3072:zoUvg4fqjO00Yhxuizc6QIFqC067xd8xYFa15e:zojV0Y3zc6QIFqCNFd81q

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe
    "C:\Users\Admin\AppData\Local\Temp\2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe"
    1⤵
    • Drops file in Program Files directory
    PID:3844
  • C:\PROGRA~3\Mozilla\crdkdxb.exe
    C:\PROGRA~3\Mozilla\crdkdxb.exe -ofessij
    1⤵
    • Executes dropped EXE
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Mozilla\crdkdxb.exe

    Filesize

    173KB

    MD5

    ad38f1de34b6d7d80d082512ad512710

    SHA1

    6752362aefd831c1ffc26419c023f2d674893824

    SHA256

    dce8dfa38c80a1561cb45f53584b3eb4620cbc3d80e46808d8759d59f5dd1a0a

    SHA512

    24c155111e2583ffee58b646094212949e9f5c066d7bd25f353ceabb3829978ff3e68f85088978aac4377d8e00b175f1d99f7241380100742a2ffdfaa267e470

  • memory/1660-7-0x00000000020D0000-0x000000000212F000-memory.dmp

    Filesize

    380KB

  • memory/1660-8-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB

  • memory/3844-0-0x0000000002200000-0x000000000225F000-memory.dmp

    Filesize

    380KB

  • memory/3844-1-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB

  • memory/3844-5-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB