Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
09/05/2024, 22:35
Static task
static1
Behavioral task
behavioral1
Sample
6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
Resource
win10v2004-20240426-en
General
-
Target
6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
-
Size
73KB
-
MD5
c4cc48c9500c1acb1eea264012839322
-
SHA1
85e932765b1b3ddf5b48b31e4bd0e17e802a9a2d
-
SHA256
6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69
-
SHA512
c63c0d6d28d55aab09e02c3fa456a76da65176b874edcb6d08461968fac8e4a9e65132bcf4a910fc8501f76ebec82af1e72288f764d4ac3ac81aa2d8ab67a699
-
SSDEEP
1536:1wrcZa4V5fH01ZJdlUOIV3js6/XyMgjm6Ul0sYnLwDFz:y6RRH0IVweitm7lXYnED9
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 3532 omdogad-ivid.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\omdogad-ivid.exe 6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe File opened for modification C:\Windows\SysWOW64\omdogad-ivid.exe 6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe"C:\Users\Admin\AppData\Local\Temp\6b9883ee443b5304250f180c9c066950a651414e0c97330f2dfee9863d64ed69.exe"1⤵
- Drops file in System32 directory
PID:1236 -
C:\Windows\SysWOW64\omdogad-ivid.exe"C:\Windows\SysWOW64\omdogad-ivid.exe"2⤵
- Executes dropped EXE
PID:3532
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD52daf064d2e559e8176c2f80cd8bd04f7
SHA1372f29c9c738b38fa7c1af2f7cb8cd5159059437
SHA2566b969ea535d6aa24385b0f4b4e69a0676f3f32af097d0c3657d3ee0615991c9b
SHA5123c01aebae4d9fb9158a36ee07578833e737f8ff524f99190a1c92d86aa5917a16f3f9652011ce0744a6e75820b0e798da7c786f26eec0cfecf1705a30da37dd0