Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
67s -
max time network
68s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
02/05/2024, 00:58
Static task
static1
Behavioral task
behavioral1
Sample
compiled.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
compiled.exe
Resource
win10v2004-20240419-en
General
-
Target
compiled.exe
-
Size
65KB
-
MD5
f246c3425459bceed3e37171d6283acb
-
SHA1
11788bdd86249bee2fb229578fac4501be0ec825
-
SHA256
c9c8fcc4274856ec5bab9992c089311e33e2b8e4eab406dad3f33665ad7f0737
-
SHA512
1b5450d09681f01a156e7924ea29a032e5a88dc291c9e7190683b86eb232d059b7e9a5877aa44684204d81ed813f3ac1abcd3b925a54199e11dd68fa7bd8b254
-
SSDEEP
768:WHEUm6CykuyDGR0q605PABcuB9Lu8l89j:WrC20dAPABc2o8
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\compiled.exe"C:\Users\Admin\AppData\Local\Temp\compiled.exe"1⤵PID:2112
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1124
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:2276
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:2684
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:4976
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:532
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:3548
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:2500
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:1864
-
C:\Users\Admin\Desktop\compiled.exe"C:\Users\Admin\Desktop\compiled.exe"1⤵PID:376
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD515311786a2e966aaa10c0592ac135320
SHA16783c053788220b4649b88e3f4182c525a80a560
SHA256e0f5e0dcbbf9aad6a1c803852758744961373f51e33d02d0bd9e7b54e34e689c
SHA51298730c694ec7603615b2ead0edda82a9e22a5f352b675ebee5ae5c8d5ed5ada499dc4422181f2760160a83418c66453ff9d8ed4ce748df637a50a921e36f4be2
-
Filesize
57KB
MD57de172563eb779f66e387f4740887b75
SHA157e79a0645f5cae7a7967101d8273fafe15b209b
SHA256d481a4354fd3e46e8462169e27d6db56396b2698425e2b0c176120c7bcf1b732
SHA512ec4ba3a59b79ddd78f64719f752a110930ad1c9922d0875c6bab3accc8e851787414bb83489e2e1a2ffce6ce42b08c91505c5c184d73fddbc42f5633a977ca9f
-
Filesize
180KB
MD5a1363a096ad8decfd2b907fe3282834a
SHA1eb31b4ca09c4b22d2754e62afd506c1ded89d2b9
SHA25655d266aeb4634bd96cf2408fa12ae29becc0f9d1b2867b893bfcc63185aa1f88
SHA5128ab6bb83319df395574e1242e956b045cd095df12034e5b2f0123e03c94348b74fabc623a5c42a6724b987c204e9e094a8928088daa6bee47aded8c2adb66cec
-
Filesize
31KB
MD5bcc6ef51e501bbc7eaf476334efda354
SHA1b4288dbb0262c5982c050a92714495587816a447
SHA25649875dda5e76e45c17d77d63993a1463704291e03e5728b4ef919a165765a159
SHA512df87e98faf9577e563b5531d87c272fd8cab74f363991f19f3d7758a349da0ea309a47ad18a919037fde07b641b0c78cac571e8fbdc9a53ce4a65de2ba6c01dd
-
Filesize
93KB
MD5f50ee45073194b13d75301f00b8f4cbc
SHA1d4df54fa8065c32b86d316ea9748172482e7e37e
SHA256f0f9daebc82ff4a2a08e90cebce458cd13e8f63b9751dd1f6b92dee1a73be2c6
SHA5123071c044a1a8a8c1eeca86d2023be07f5261da893a99e7bff40ae8342117417dcd3ab1120999de5e1029ad7d944e50c9a0d1cd61c3f3f697d9bdcdf0c9d3e73e
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240419070936.log
Filesize15KB
MD5cb57e82593f90b01618f6a240e19e10c
SHA18867fa8c55d8da8fe436850aab9deb987f10c341
SHA256ffbb8828c44827c878af149fecb095e8b5708fb852c01d8c48651560b1319df8
SHA512ad72c31df7fd176bb15fe9aaa0011c2c1fee7af8011c58a1f46015b1e95c66aa848955506e486b88dd7f70a0713ad517e6ec5fa275c89c7062f05d81d46b145c
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240419070936_000_dotnet_runtime_6.0.27_win_x64.msi.log
Filesize551KB
MD5faa457cb4096bc1e86fcc7c602b9588c
SHA115d623e18c2481f5056014cc4e4ccc0678833911
SHA256a13c35af264b765f3e3936aaa841bb368139e54418f180ec8731f403379a3716
SHA512fb989ae8b565f3f67b79986db64850d104369a7d280d16695432e7d9d3602acdd52e99371df4c5fcb0431a82b23da7e0f7472fb27787687a3319b0ff0023cb5a
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240419070936_001_dotnet_hostfxr_6.0.27_win_x64.msi.log
Filesize95KB
MD5d621878507d4a01bf5fe411f05075ef5
SHA125b9a7e53bd6083829381f5710aa464825344d0d
SHA256f7442898ace3785caf917cc58b88851aa328b92e97093d1097e665d29a6db345
SHA512036389a66e809ed3aee91c036b789d5e510c086b75f0e39989e1ce275b18f6c8b94271bb77ed251b9a39afdb908f2d562ddb810e2600fd609a89d2e54f681e1b
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240419070936_002_dotnet_host_6.0.27_win_x64.msi.log
Filesize105KB
MD5c87451352f95818405e4ea53d0260388
SHA1e6ce48dd1fb14c3b58452f1b069496f984603c0f
SHA2565d5255782fb8b539480599165e4bf677a0dd30222b04e11697472f2b76fcf79d
SHA512a9d8297ecbde6c66b3c65d2f9c8a43cc76931d6d7e5bf707c28080dde2b482b6415b3b8f3c69b6a4a4c686ad0a38c79aa6ffd366752fef50e8f6d3c6863c21c4
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_6.0.27_(x64)_20240419070936_003_windowsdesktop_runtime_6.0.27_win_x64.msi.log
Filesize847KB
MD5d00b2165740882589eba5ccbc12aee53
SHA194f783b3ced505e2af86acf051223095e66134fb
SHA256e0563e1d5e0cdf620415c5ecd916f75a4092d00b86129183cd9a1499b0552da6
SHA512debb3411399009cb1b4485bee2d9b743bc94df0d880003b8359d37410e46a7a03102799c7cb57e12690825e1d33821004d78ebe215bce2215856c7bf98a4e1ca
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240419071016.log
Filesize15KB
MD54b133bfd43eff523a9687ee70ce0b87d
SHA1590d925cdf25f9daed4b5963972cc0ad5f5a373f
SHA25604149dbd6b594a980b64eb348fd30448a00060d13e71a1a89dc78152553dfaba
SHA5129801f0c44b4e3e97dbfe172107ae73c694e77eb38f7e3df61cff76bc09e2629e3d2932ed9f7edf999093e6992bbd7c3c92be1683225783121be56a16951f93e7
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240419071016_000_dotnet_runtime_7.0.16_win_x64.msi.log
Filesize470KB
MD5576a86278bd7cd06f1a0e7fe8085bd61
SHA1b617d7d6aa71bc7a14c031ed2ab98fbf240513d2
SHA256328f374fc7e09e7bfff28d1528cfd4750d1a9b0cf31fc28cfa35e5d930fdaae9
SHA51215fa98f3d155e15451f72e2077ba26b86fadb2cf2980fef07ebe80eca05858e2060734625692b42f0526f915e60328849cb71b8a58f08c2fc39b58933dc2960f
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240419071016_001_dotnet_hostfxr_7.0.16_win_x64.msi.log
Filesize95KB
MD54dfee0fdeb23dbd1ddb392b367b07e46
SHA101a3cef649a8c51f716d7429ffc424d795934f89
SHA256c6a9bfa0263a8a05af538d8595ea4cf39c801216f59e38491245335a8846cbfe
SHA512d3e95f583f5ea5723805e1fbbe30aca4d7f8570d63b84f128c40e5532646bdb333e4bf91af232b7bea7e6c158c9feaa598a52793122cbd883872c5523a69e0c2
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240419071016_002_dotnet_host_7.0.16_win_x64.msi.log
Filesize109KB
MD5b0fe84b13be18df5cc383ae191f4ec45
SHA17d9f806bf6afd1d9805742637d3623b15d8742e9
SHA25677785eb2a6ca81c898b5630a7c3b3cd33e2f7314d96e8cf5d8565512a937103c
SHA5121906fb503047ea5f85d316d61666f0b5e635f1a646e96e14d2bc58e6db702ebcef724a77c29236f0f1a468d8cac83890b8a0b444cb9153ad870382da1ca546ab
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_7.0.16_(x64)_20240419071016_003_windowsdesktop_runtime_7.0.16_win_x64.msi.log
Filesize852KB
MD550e831ec3f8edb77ffac63e7359e0e3f
SHA1a3363d8ded0605e05ea2adb9c92fe4270de320de
SHA2562b4ea95c1cb7003322b9a8c7b29ca0cff62236c7b9ed0ef6bc013a5ecf7aa516
SHA512c7aa8ee5957b74421c38bc146f29c4912b3c0506b11202f06c18847cd7085b08eb32e0b836f927e1b923d3c3c4a53b8ae8587f2ad0a04964965782fd86f90d75
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240419071037.log
Filesize15KB
MD5ca4e1bd4be5daed939199dbde564c238
SHA1f3e6f83c441fd7a188a5e41ea1061b536fda3587
SHA2566c102c217d9a4829350b6668f318a270654664d045e7828bf605dd4d96bb1a42
SHA51295c9c3bbe7fdd331c45c3d86dd126528969827f51fb4293441d6db7272bef05168f6ad6aa2661a869e050560d7ee5c4764a262d86d292d0e47a95ebc70c837f3
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240419071037_000_dotnet_runtime_8.0.2_win_x64.msi.log
Filesize469KB
MD57859267d252ad7ba4db30c436a5fb742
SHA165ff8a27090e75377e9537e2933fece8bdee5c68
SHA256bcc71ec42dea1d53688072ccc1e42d669ce1d08e089ca7f5f7b7bf9712b7baed
SHA512f90f631e885c0e37b2e40d5721ff258615f2ee3c0eee4259644bd5458fef5cfcfeff52b035707457ffeb79c43e0c5a5325d9085ed410d24af767cdb4ab7e2d15
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240419071037_001_dotnet_hostfxr_8.0.2_win_x64.msi.log
Filesize95KB
MD54b11b46df0ff1760f00efcfea7c2d15e
SHA12a6ce61a7f2d436f6554e45c424d342d90fa2e79
SHA256e416406c21ae3f0848801c46e94848e44cb3f0f173f43504a75477890c3fc5fb
SHA512d08187e94032ed61ba3c2f59e8a204b809a57f4058aad26a8ca4c15eee2134ffcb8591b4c64b39f1228f877d7c0551fc661fe7937ef37b447cec522a0cb4e2cb
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240419071037_002_dotnet_host_8.0.2_win_x64.msi.log
Filesize109KB
MD550f5c474c8712720a0ef28b921cfd9d8
SHA1adb65801422603b394109617f9cb69ab4fcb85a0
SHA256288d3c0f2553a5260d5c058e3e2d0044382fdc9e408b4d2b63b5c67186446d66
SHA51204de26d5c554b6ef50bcb9a05da178c6612fbf32cf3329fed0f0a8c73b4819c8d4a0d738e5f874d801ddc766eeee959f11cfd6a1e98f2b1d485c3255bcc58616
-
C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_-_8.0.2_(x64)_20240419071037_003_windowsdesktop_runtime_8.0.2_win_x64.msi.log
Filesize846KB
MD57c92c92c9d598a72b529ab5a6816806e
SHA174536749c395f6f7e1221e8f18d4acd5af2f8d67
SHA2568195716ed6c9561b3415fd1d0812f0a192866d7b42e6c0436c78080d1410407e
SHA512002b50032eb101a9e7903b936949d97a00243caf0e2f14b064b5e8ee9deb57749993448b1b0e126a2d737043102ed9fbdddc2ddb04d01c2e84592cafa610a230
-
Filesize
470B
MD5f7d53ac2bc673ac597bbacf3b683bca0
SHA1619022086547c58c5d3104daa4604fd605b6df94
SHA2560289204e14a84f24e2eb4822201e41276a7f50ba289a9adb6291aab81db78751
SHA51290f4f8d2e8de7484ea3ada703a975d1355d219db71d347032db2a2ba1b8b014b5001b6ebc451bb9209b114e5c2ee4d7daa47aa572cc3817ac93475ffed50975c
-
Filesize
6KB
MD5190ed873de8f8c0463df8de2f77568cb
SHA184651a8920d07c5add6e05588a18dcfe06715ce2
SHA2562d238bc2d54fa65cbdf85392719dc66bb8fb9bdabb1a4a8c801800ec9bd840e5
SHA51262d5efb92d84ad7e3f20e18fe4e850031d795ea14f5f9302d50d21ddaaed5c4bffa715779086b53484de045258fcbbc1569efdffe6db6a7cb350e06742b5e8d0
-
Filesize
1KB
MD5fa50399111ca51a70d1426996162fb80
SHA14bc1c4e6ff4190d68f7ab5e6ed2efdc9f82e631a
SHA2563c669cf5c0e1bd48dc78f9de72af88573341948c0cca0f09d3af382557724c49
SHA512ae93f12ca57b983d4d5036318cf773d7fe847ca19eca61621cbbebcb6cd1bd08e7adde1adf37630fc71ebab8e9c6c8f42597bfb8ffac88eed1b35c4d8973986c
-
Filesize
425KB
MD5781ee24fa4fdf0e0436d160dfcc23c89
SHA1145fa7522fe2b944df08439bbee3be4a94030d52
SHA256fe81ca2c1b0150089985a1158ef352198fbaa897c7eb5d43db71fd6309946ad8
SHA5123a655c5cea233fd1e2581cd11d2fd8acc3e2986cab8b03e6416e4e232df211a3ed5231fd4a0b4bcb7b3d93e1359973d758eb63d99b05c21d83b55d7df5fb2297
-
Filesize
414KB
MD536dd0ad9a928caaa7d2136a75f70a5ad
SHA1618d66eff28c29ebb35c807dee7e38595130d4af
SHA256872f82ae1f4e5752fe11418a13e23626a59a5de06d0a06c33a6205b755fa12c1
SHA51222d08dd1a450cd82c3bc7ee6ee9fd65de080c83bbdbb330db75db074ed5b684e92f7c2c4b37722e7f3ee4190641587a56dbeff39b41d24fb8b06c4fd083f7dbc
-
Filesize
11KB
MD5c017f2a1b888d80a16f986e6d206b685
SHA1fbe3ac33f1cbe1d08112e21f13c05c4415b4e6b7
SHA25621a2df0d7fd2a2071824294a15e08493204cc3b1af9f5c405ab166ced512f3db
SHA512c269dad66546443572deb96f69d273f3aa71d6c58c9e5787089d3856b8943c7e0f4659a2b52f8c73b23ea87a0a061aeff9e3fc61d010d89eb3d254e734410352
-
Filesize
11KB
MD5d5a5d35561aeb2d9ee2d60ca6e47c03b
SHA165f130f0d03d3da1eb9dc1f948ac485510a9c14f
SHA256dc9b745f3d0796659e37f7c23cc15135669b59ce5449a0d667a712379afe76dd
SHA512e569580883cc6e98e115926df27a888ad0b5f98f4c908d2257c22a266edfe850189578ed77884d7f3d9b6b31c9757e626b3e81485e0950ac4dd6061a1618ff9c
-
Filesize
13B
MD5b2a4bc176e9f29b0c439ef9a53a62a1a
SHA11ae520cbbf7e14af867232784194366b3d1c3f34
SHA2567b4f72a40bd21934680f085afe8a30bf85acff1a8365af43102025c4ccf52b73
SHA512e04b85d8d45d43479abbbe34f57265b64d1d325753ec3d2ecadb5f83fa5822b1d999b39571801ca39fa32e4a0a7caab073ccd003007e5b86dac7b1c892a5de3f
-
Filesize
295KB
MD52ab9ef535a815e8bdf57532bd49371d9
SHA19607af230562f97fffcc7ca09689c1ea103540c1
SHA256b74f2bb0a7579aaac9fba96dbc76f631ea59f73b5173594b8901f3a5a2c5eda6
SHA512ed20412c229a98332f8c8a5ee1d69f341ebbb15a3e0500bf30af72f476d3904f14b0b0df426d540d12512d6051acd380f43d716e87739b9ab3cdc8183122c2bb
-
Filesize
120KB
MD5d3186aada63877a1fe1c2ed4b2e2b77d
SHA1f66d9307be6cbbb22941c724d2cf6954b41d7bb0
SHA2562684d360ec473113d922a2738c5c6f6702975e6ac7ee4023258a12ed26c9fefe
SHA512c94e8aa368a44f1df9f0318ca266f5a6a9140945d55a579dee2fd10aff3d4704a72a216718b35e44429012d68c2bb30a92d5179fbc9fb4b222456a017d8981c0
-
Filesize
3KB
MD5c3cc99e3ac11e839335c01ac26b38d60
SHA10cc5b4b332702be7019e28a234df11e6d7d0cfa7
SHA25673dd2437b600b2cbf557043d403ef16e42c49d1220f4e4539c90d156adecd69d
SHA5125208dd2056421b755d5fdae94f727fa01cc883085af4aaf44003cf63d4d6de0306c3b9464a1d425b1c447c00aaa7a5cdd14fc891540f5f265af8e9bbe35ba6b5
-
Filesize
25.9MB
MD5bd2866356868563bd9d92d902cf9cc5a
SHA1c677a0ad58ba694891ef33b54bb4f1fe4e7ce69b
SHA2566676ba3d4bf3e5418865922b8ea8bddb31660f299dd3da8955f3f37961334ecb
SHA5125eccf7be791fd76ee01aafc88300b2b1a0a0fb778f100cbc37504dfc2611d86bf3b4c5d663d2b87f17383ef09bd7710adbe4ece148ec12a8cfd2195542db6f27
-
Filesize
40.2MB
MD5fb4aa59c92c9b3263eb07e07b91568b5
SHA16071a3e3c4338b90d892a8416b6a92fbfe25bb67
SHA256e70e80dbbc9baba7ddcee70eda1bb8d0e6612dfb1d93827fe7b594a59f3b48b9
SHA51260aabbe2fd24c04c33e7892eab64f24f8c335a0dd9822eb01adc5459e850769fc200078c5ccee96c1f2013173bc41f5a2023def3f5fe36e380963db034924ace
-
Filesize
63KB
MD5e516a60bc980095e8d156b1a99ab5eee
SHA1238e243ffc12d4e012fd020c9822703109b987f6
SHA256543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
SHA5129b51e99ba20e9da56d1acc24a1cf9f9c9dbdeb742bec034e0ff2bc179a60f4aff249f40344f9ddd43229dcdefa1041940f65afb336d46c175ffeff725c638d58
-
Filesize
697B
MD50c56cfe1f581d81711c6c0f34ef62867
SHA13c5324b6b0a129bd1761a42dce4fe7d3c4d009b4
SHA256284f416b826d9d04ad9df2e5aab7409a47daf8112e5363f8164545ab7f044705
SHA512bc2f8d8d956102821c4c29afd3a110706f312a27b6cb2bdae2d887d5bffa6371b8704c5791dfa398632659c1b498055e6ce67dc0ea8fdb24d4800d37f02f1204