Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
48s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16/04/2024, 20:23
Static task
static1
Behavioral task
behavioral1
Sample
2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe
Resource
win10v2004-20240226-en
General
-
Target
2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe
-
Size
173KB
-
MD5
28a29eb3ba8879d946e7ad0895028f6a
-
SHA1
7871fe5dd6d8c663c8bd73c52d40bad1f63fdb22
-
SHA256
2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25
-
SHA512
1102c0dae4f04991f4766d7bcd905d8f6b1e34a2544558df2a286397162e3d6bba6a63ae4ea5f67e9cda399c9235bd2f876c480e925a6cec9fa84368274f1ab6
-
SSDEEP
3072:zoUvg4fqjO00Yhxuizc6QIFqC067xd8xYFa15e:zojV0Y3zc6QIFqCNFd81q
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1660 crdkdxb.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\crdkdxb.exe 2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe"C:\Users\Admin\AppData\Local\Temp\2cd97cb3d466e84fb5c77c556c74e5235014e909c7ad5e6477b22c4c855dae25.exe"1⤵
- Drops file in Program Files directory
PID:3844
-
C:\PROGRA~3\Mozilla\crdkdxb.exeC:\PROGRA~3\Mozilla\crdkdxb.exe -ofessij1⤵
- Executes dropped EXE
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
173KB
MD5ad38f1de34b6d7d80d082512ad512710
SHA16752362aefd831c1ffc26419c023f2d674893824
SHA256dce8dfa38c80a1561cb45f53584b3eb4620cbc3d80e46808d8759d59f5dd1a0a
SHA51224c155111e2583ffee58b646094212949e9f5c066d7bd25f353ceabb3829978ff3e68f85088978aac4377d8e00b175f1d99f7241380100742a2ffdfaa267e470