Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1561s -
max time network
1567s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
12/05/2024, 01:00
General
-
Target
fdm_x64_setup.exe
-
Size
38.2MB
-
MD5
dcf5ac41204864216b005ba522938ca7
-
SHA1
ed83d911fff891832a3b0ae31f99cf85bdd46762
-
SHA256
3351b2b19b555a2cfce01090797637435cbe4109adb037e4ea662a1e4030073e
-
SHA512
10a520980dfa05b6332ef12e77c6812f6f5b2d26d8e8bcf458ebf65b7ec2d97b6993007962fc3bb4853e48afe2e718b45f38857c9356f96f3d3fde91d43fffa2
-
SSDEEP
786432:5yGnysYxmCueXsJ2xHmnQPJWkyRAgm5IsJFqrvrM3+MYnX1y:IsYxrQ4THgcd6TM+/n
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-KGQS3.tmp\fdm_x64_setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-KGQS3.tmp\fdm_x64_setup.tmp" /SL5="$400B2,39071125,832512,C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
MD59a1694433f4207f5c8b877f6bdc0998c
SHA14cb690958175d01b8a6ba5002bfe703adb5db7e7
SHA256bcc145b9ccfc3a5129b277b46ae3278b93090aa306d33d5a77958362d9406b1f
SHA512a7fcea133b26837c73588b1f4ba4ea99b153874eaa76b58b54c3b69b1a23bffbbed7338f8450d437ad9d98fe46290d751e7a2fc2244ee46ad0485377b4b5e98d
-
Filesize
864KB
-
Filesize
728KB
-
Filesize
864KB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB