Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2024, 21:14
Static task
static1
Behavioral task
behavioral1
Sample
45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe
Resource
win10v2004-20240426-en
General
-
Target
45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe
-
Size
73KB
-
MD5
6d2be934fe09986b3249b14a46ebffe4
-
SHA1
ee930f1ebba7a7ebc75081eff654e6ca11bfb548
-
SHA256
45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd
-
SHA512
af37cad7b88a800b46f171325255eb95eb2ff7e887b7fa02e00457473d500de4077c88dd2098eefdcb39e6c1e2332d1e5a249c72c33937ed05cdf9e17d80a570
-
SSDEEP
1536:1/PMkmQgitNDBThJz0J+TdrIreROg/pP0F3UgOkFDWI5wn:CkmQ9tNdThJIJ+ea8WpwUgOyDQ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 4324 ikfavoos-cat.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\ikfavoos-cat.exe 45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe File created C:\Windows\SysWOW64\ikfavoos-cat.exe 45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe"C:\Users\Admin\AppData\Local\Temp\45f832c118c5d221142d1e3cd81b1aab70086c52411ae52f82cde2d24ebc51fd.exe"1⤵
- Drops file in System32 directory
PID:4432 -
C:\Windows\SysWOW64\ikfavoos-cat.exe"C:\Windows\SysWOW64\ikfavoos-cat.exe"2⤵
- Executes dropped EXE
PID:4324
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD5bd8c671447d8c1e3d1bfc0306c8400c7
SHA18340b3fced16153f17c469775ff079b5a9c2ee0d
SHA2567b3e27c89a4ef9c53208bfa32c78b58b168c6a9394824000e666f7a28da4c6b2
SHA51265c9ce9f65327bac6ae81040d7a1ea6e9e4160b5aef32b9e2540248cf34ac2276edfb65c1a736d80f10b52960cf656d1dead4179f7d3030e2739089b9bc65d4f