Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 00:49
Static task
static1
Behavioral task
behavioral1
Sample
a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a.exe
Resource
win10v2004-20240426-en
General
-
Target
a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a.exe
-
Size
207KB
-
MD5
025b1b20a223205d4f566df00f29176b
-
SHA1
cf0f5263d9d511cbfaece84d05161d1c789e7c26
-
SHA256
a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a
-
SHA512
8be183a6c3a47fd17101357c91dffe7b6d6f04488cd22b76f717e98edf679bf63a89e84226cd54dc8c64e04b30dffe068105a6bd9f3b2627a6c888e28de9b45c
-
SSDEEP
3072:MRSasuUaKjU3TicAHJsow3zpEENchbiMKh5Va79ayi05:MRSasbamcAHJ636+chbiR5Valio
Malware Config
Signatures
-
Modifies AppInit DLL entries 2 TTPs
-
Executes dropped EXE 1 IoCs
pid Process 2760 oyfhgkd.exe -
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\oyfhgkd.exe a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a.exe File created C:\PROGRA~3\Mozilla\hbxxkjc.dll oyfhgkd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a.exe"C:\Users\Admin\AppData\Local\Temp\a43c3265cd2ab36a3b0c8c77f6bc23ae9c770ee33a4485e0f47f26b8a852f59a.exe"1⤵
- Drops file in Program Files directory
PID:4068
-
C:\PROGRA~3\Mozilla\oyfhgkd.exeC:\PROGRA~3\Mozilla\oyfhgkd.exe -lxegbhe1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:2760
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
207KB
MD5e74bfbfe4d483585231419a322fa6406
SHA109c8c9bb87f272b944c22c3d86fad2d71b9faa18
SHA256091a8d143f928bf51973e7bf498f4a30a62717f3a4e886e51fd62062087ad49b
SHA5121280d41efce3f97be5207ed5cc10824d874c5aded9c3e6009be644d9fbb676ab9cab958cdcc2c8a831a66ce87504a909f124f4d1ef929a2fe321c90ee9371c0e