Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
147s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
19/04/2024, 19:14
General
-
Target
OpenShot-v3.1.1-x86_64.exe
-
Size
188.3MB
-
MD5
0e04b074498775335e6be5ec6f6466a0
-
SHA1
4bdfe5c520c941277e89530940fc267cc5689daa
-
SHA256
8fdc9cc3e13b782f2c8e1bab4d04fccce7f2780b4cc7c933cbf720cd8df0bb25
-
SHA512
b91ab1d3e8ab361246329cb1c2296647d81dd828e845139fb4861e4fe51583d72ac33ead9dd5344d4131e22afa86b48662d0127a9c42acc3cc5d63119e54901a
-
SSDEEP
3145728:m0RjPuUa3o4Q7SKJw3ORgtz8UmoUfJRRdi+yhptmMIW6NiCLlIbCEMzsi07WseAY:mAPJvSR3tVDUDHivtmMIxsCzsi0739b
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\OpenShot-v3.1.1-x86_64.exe"C:\Users\Admin\AppData\Local\Temp\OpenShot-v3.1.1-x86_64.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-4U2HL.tmp\OpenShot-v3.1.1-x86_64.tmp"C:\Users\Admin\AppData\Local\Temp\is-4U2HL.tmp\OpenShot-v3.1.1-x86_64.tmp" /SL5="$901EC,195989626,994304,C:\Users\Admin\AppData\Local\Temp\OpenShot-v3.1.1-x86_64.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5496c96bd5f719cb3bf1c409ac651e528
SHA1b0001a0191e1b7286939eada2b4d676425a912e4
SHA2566d4b5fc59bf2b7d34155cb98efa24901c3819846fff125305859b48653f9e317
SHA51237a5c9488ca22a0b0f8ab5bd9cf3626e9c99df0ca0e186d42f9a053f476e103c0002b49e70bdcfb78ce5e6c1e7690133281ddeacf7ad9b1c161fd2d7bd5a7737
-
Filesize
5KB
MD5f36f78ef02ae2f1b270d006c8b5b3455
SHA10cc9b6a405d787191e74ab3d1c477c30f73dfcdd
SHA256d4b0eac63de6ba08ad5c1cda752ffb675e0dfd2b86617509da0447ad3c186820
SHA512397a06143cf659d8ca77b7a4a7466f98d18375706281c2c25b24bcdd47bb99ba10cdf9796504f76feab8ee55efbbc7901800b9b30275c432e98d98787313b9fc
-
Filesize
2KB
MD5d0a225c8dba29311326cef4863be8ec3
SHA10b97497fe7cd52c95c6dd167bc944f562fab0b98
SHA2566c4c8305adda7c581486c92f05d469d12884ed9ed2d15c9e414f063486313517
SHA51253cbfdb79e0ef8a5e8a3514455a658e1d0fdae7093c6f635d7b3be55270980ba122979872ce954070d7768001f7642de35f3f5e4aaaf3bd419c24851b6ef1716
-
Filesize
713B
MD573d225c9ef507c4ffb7f311ce6cd8dde
SHA156dfeeabf96f074641d519ec93179a61d696fab7
SHA256ed021f037e74645c7751ae67ad0be40051d98f4e96e1e6031218d9ef6c16efb4
SHA51298efb2b096cc234e40edab4e586e2bcdb39e3989cd0b458cd6a32e70b14219bd6f44f9fa13b26a8868a6f9fa97deb144a5409dd83416a648c4d1bb595679c4b5
-
Filesize
2KB
MD57fd022d1370ac250b517b7dd0e789ce4
SHA11a3ba2db2a0ca67a3bb069a09b5505b5da3b22da
SHA256b0673b2357a07738795941eb1f5e165ebee327c79468f30f49f0912ce7cf6d8c
SHA512e9df33568b8fc41b25232a0c39bb1fb44d9cb17e1a01df79cb326895b284504e4f7e3c6b2c8043833b155eec123f972a0231a8b8bd0ef15165fb843fcc6eb614
-
Filesize
1KB
MD579923367c9f462ede447b5f1db9e93a6
SHA1b87cadcaecbea6c6909652e98d78ba13419effc5
SHA25621f906c5dd2ff3af45c1365d2964066f54908b3508877704af16d45a6999116b
SHA5129ddbac133e323c246f332d0e590abfa00ec9f2dd43af704aff0619dcbc062c6ce648c3dbb5738c198231dd42320213e05651089fd5e3ab7933d4e1c3093b7b6c
-
Filesize
2.7MB
MD59d9e1ba85c679259e1db65a5dd93c87e
SHA1b3e6bf2d921b917d223f91f5b78d1454f40ed655
SHA2563349a54bd56a19ed6149f6791fd498bba6e2fa0d89484affc970aed9322da1a6
SHA512662c17ba04c652687459f5b07bc292f09c71d25efefd54376cde67fb1274cf88f1750fe01e868672fc2945d4b8dba374f3813027c939386e0aa5c59415587566
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
4KB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB