Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
123s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
17/04/2024, 04:28
General
-
Target
0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8.exe
-
Size
816KB
-
MD5
4fe2e2dde69304e62b0cf09bddd030c9
-
SHA1
44e62b04ea6c564c0f940c1c3f6cf556fe39a6c4
-
SHA256
0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8
-
SHA512
4e8e9bb264246213621f02cf9fec8bff15ff3db7284dc99fac34c70a54002dcbe8c6c4ad249d0a4fbd2fba94aad544c516bc1da9c4741e4871bdbd86121a2572
-
SSDEEP
24576:hY4G2qLMJalsnqShyoo77lUabuSvbDQOOdIxJsG93:e3XZynV4oDabuWbDQOcIxJJ93
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8.exe"C:\Users\Admin\AppData\Local\Temp\0e3b1c329573011e4e411be8375b5add6736b83983ebbe1581be3fe39c4618e8.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1F0B0D0E120D156B155E15F0F0E160E0B160D.exeC:\Users\Admin\AppData\Local\Temp\1F0B0D0E120D156B155E15F0F0E160E0B160D.exe2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
816KB
MD50dbf163f9d7fca3d37882bf64335953a
SHA1680a9d9bf33147ec941807c73208daac76722dca
SHA25679f746ee488d20755e9521dd1d670c837fe959eceb4d3ac567a07a20eadc065a
SHA512f932579467b2a128a399034dd7bc7b2905da95a159c164704ccfc1ca8f6e03e8e9914d76bce6145b6dc71935957593640b716a13ac7806978a84a1fe938d8e64
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB