Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    290s
  • max time network
    255s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    08/05/2024, 22:44

General

  • Target

    2c8ba90a43aca4b834da5c040bdb79d8640ae1bb32b5477800bb8338d0c9ada4.exe

  • Size

    562KB

  • MD5

    0ce7bd7c85f16e3c9fec756385f3820e

  • SHA1

    77eb3fee5a031bc27996f2d6e3819ea081ce9451

  • SHA256

    2c8ba90a43aca4b834da5c040bdb79d8640ae1bb32b5477800bb8338d0c9ada4

  • SHA512

    99d9a4e2b6fb6618b0866d8c4f664f43258f261f771ce94fb88eae5360dcf69318c96349af82d2b46c5f338842b38ea6e4638ef2a56ff737d9239e1d7cd85a73

  • SSDEEP

    6144:LlGKrv3o7KXK6hsjthkIdog1KW7limCN7vfL8VLVshD0MfXB0ZbK/lSaTPZfKsPh:ZNrv3wyhmCoZlqLl0McbelSWPZf

Score
10/10

Malware Config

Signatures

  • Pitou 2 IoCs

    Pitou.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2c8ba90a43aca4b834da5c040bdb79d8640ae1bb32b5477800bb8338d0c9ada4.exe
    "C:\Users\Admin\AppData\Local\Temp\2c8ba90a43aca4b834da5c040bdb79d8640ae1bb32b5477800bb8338d0c9ada4.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2272-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/2272-2-0x00000000047B0000-0x000000000481B000-memory.dmp

    Filesize

    428KB

  • memory/2272-1-0x0000000002E10000-0x0000000002F10000-memory.dmp

    Filesize

    1024KB

  • memory/2272-4-0x0000000000400000-0x0000000002B4A000-memory.dmp

    Filesize

    39.3MB

  • memory/2272-5-0x0000000000400000-0x0000000002B4A000-memory.dmp

    Filesize

    39.3MB

  • memory/2272-7-0x00000000047B0000-0x000000000481B000-memory.dmp

    Filesize

    428KB

  • memory/2272-8-0x0000000002E10000-0x0000000002F10000-memory.dmp

    Filesize

    1024KB

  • memory/2272-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB