Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

25/05/2024, 17:51

240525-wfdqjscd71 8

25/05/2024, 17:46

240525-wcqwpscc7t 8

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 17:51

General

  • Target

    Delphi ( Autocom) 2019.0 Cars.exe

  • Size

    10.8MB

  • MD5

    16866b9762000c4e57787911a2aada98

  • SHA1

    f3d873cbaa765e215fd6a70127ac8afaee198088

  • SHA256

    aef0a3047c1d28f5ea9c64a530e1183c507f62e8878b51d8b0ac043fafb87df1

  • SHA512

    39180033859304b006a11b6aa65e5e3a35772056ca6c47b77ad4ba34c02e02791b4d590e6bba35cdac173fe6db7c59d0790b9dc0b46446b59d4d76391b545dea

  • SSDEEP

    196608:ueU4ys2IbPyZ3VhHX5sbNjE5GqpUvQEleKQGIPeU8sPdHkpr+BDRJTImW:ueUBtIbPyZFhHXmbNh0UvnQ7xHkQBDRO

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Delphi ( Autocom) 2019.0 Cars.exe
    "C:\Users\Admin\AppData\Local\Temp\Delphi ( Autocom) 2019.0 Cars.exe"
    1⤵
    • Loads dropped DLL
    PID:3468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsc8BF6.tmp\nsDialogs.dll

    Filesize

    9KB

    MD5

    1d8f01a83ddd259bc339902c1d33c8f1

    SHA1

    9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

    SHA256

    4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

    SHA512

    28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567