Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    134s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 06:52

General

  • Target

    $TEMP/SDM143/Free Ride Games.exe

  • Size

    504KB

  • MD5

    23cad4075e1fd5d47c0434fef549efde

  • SHA1

    d7cdc7cb933466474986ae37fc7ebefdad601aaf

  • SHA256

    18f4519d20252bf579b887adec25554ac412bd79604547cca12f9f589549f952

  • SHA512

    e4176411caac89db8dd073f2b47b7970168dacad4cdecc6edae310591e279149430b10ab1f956a7722ab22677ca893bfc4eb3fe17009b9b73a95e288c12c89b1

  • SSDEEP

    12288:0obl5KiSHoYxGZ2YI7jjN3iR4S/RQq4jrY+vyRPZbN7yTMhHoSKU:/bzKLHoV1wpwxZRsrY7RJATMP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\SDM143\Free Ride Games.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\SDM143\Free Ride Games.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/848-0-0x0000000000400000-0x0000000000553000-memory.dmp

    Filesize

    1.3MB

  • memory/848-2-0x0000000000400000-0x0000000000553000-memory.dmp

    Filesize

    1.3MB