Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/04/2024, 07:59
Static task
static1
Behavioral task
behavioral1
Sample
CustomRP.1.17.22.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CustomRP.1.17.22.exe
Resource
win10v2004-20240419-en
General
-
Target
CustomRP.1.17.22.exe
-
Size
6.3MB
-
MD5
fe6ac7ec692ea6a41c12a5b96de2b5a6
-
SHA1
8a1bfd9276b1838cc859dfd443a3ae8c63c7ddbc
-
SHA256
99a13b46fc5ec89169132f3ec365c77eabcb31ea07efab203c7795da948b1774
-
SHA512
cff9b7918e3f98b5709f8fdbc87e9ed12b026360b231e8772512e66c67f28826e7e3cad23fa16d8baeb42821464b26015f63737a8982128fbd49aecfc75ccb27
-
SSDEEP
196608:O1TeFQbXLA+GHUe/gVyikWTAgO5KtTHCx7h2:cTbcBH74VyikvgOot1
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1708 CustomRP.1.17.22.tmp -
Loads dropped DLL 1 IoCs
pid Process 1972 CustomRP.1.17.22.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28 PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28 PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28 PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28 PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28 PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28 PID 1972 wrote to memory of 1708 1972 CustomRP.1.17.22.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\CustomRP.1.17.22.exe"C:\Users\Admin\AppData\Local\Temp\CustomRP.1.17.22.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1972 -
C:\Users\Admin\AppData\Local\Temp\is-C197V.tmp\CustomRP.1.17.22.tmp"C:\Users\Admin\AppData\Local\Temp\is-C197V.tmp\CustomRP.1.17.22.tmp" /SL5="$5014E,5486258,1081856,C:\Users\Admin\AppData\Local\Temp\CustomRP.1.17.22.exe"2⤵
- Executes dropped EXE
PID:1708
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
MD54c84ad73c9fd6c0d8590e40be75a7117
SHA18285d51da90a963e5e6002e3d2fc1b735a9cdf83
SHA256a656e1ba87b2fcc64dbbb9fabf4c486ed85162187b529587bdefd5e37fca6a51
SHA512e996e4f718ddbbfdb225e643a028d13ff0a6272da12570ef76cc30f5051007ac2b4084702170215bff37c28e1288340bf7752553d00a143fd9182ea0e3c431a7