Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29/05/2024, 18:26
Behavioral task
behavioral1
Sample
Logged_v1.6.0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Logged_v1.6.0.exe
Resource
win10v2004-20240508-en
General
-
Target
Logged_v1.6.0.exe
-
Size
74.2MB
-
MD5
a4e57a5c650e3ebfedcd12ffee3fee14
-
SHA1
406c718d69d6ba536e0d2251fee408b4a84e59bf
-
SHA256
99615a23c7b5d02e9a0b155d998ab687d29adfef1b57f1f52df511a9a7122d6e
-
SHA512
54ab3266705762facfa5fbca5475c79ee7a0b8ecd07c3dde20c71a8ecd1df293ec9540384a04594c2337bf2e3244d6bcf68504f77560c2d1a4d7a97674f4dd9a
-
SSDEEP
1572864:JQwYC+7xMkRCtQkTMT2Zr9yre77nD0CpbeQ/KZYlctCqkFj23tWcC8g2cnrW:J306kkQkTyCAS/DrbSQctXkFj29wbJrW
Malware Config
Signatures
-
Loads dropped DLL 53 IoCs
pid Process 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe 4276 Logged_v1.6.0.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 1628 wrote to memory of 4276 1628 Logged_v1.6.0.exe 89 PID 1628 wrote to memory of 4276 1628 Logged_v1.6.0.exe 89 PID 4276 wrote to memory of 1376 4276 Logged_v1.6.0.exe 91 PID 4276 wrote to memory of 1376 4276 Logged_v1.6.0.exe 91 PID 4276 wrote to memory of 3856 4276 Logged_v1.6.0.exe 96 PID 4276 wrote to memory of 3856 4276 Logged_v1.6.0.exe 96
Processes
-
C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe"C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1628 -
C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe"C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4276 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵PID:1376
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c cls3⤵PID:3856
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
564KB
MD51ba6d1cf0508775096f9e121a24e5863
SHA1df552810d779476610da3c8b956cc921ed6c91ae
SHA25674892d9b4028c05debaf0b9b5d9dc6d22f7956fa7d7eee00c681318c26792823
SHA5129887d9f5838aa1555ea87968e014edfe2f7747f138f1b551d1f609bc1d5d8214a5fdab0d76fcac98864c1da5eb81405ca373b2a30cb12203c011d89ea6d069af
-
Filesize
106KB
MD54585a96cc4eef6aafd5e27ea09147dc6
SHA1489cfff1b19abbec98fda26ac8958005e88dd0cb
SHA256a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
SHA512d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286
-
Filesize
48KB
MD57e668ab8a78bd0118b94978d154c85bc
SHA1dbac42a02a8d50639805174afd21d45f3c56e3a0
SHA256e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
SHA51272bb41db17256141b06e2eaeb8fc65ad4abdb65e4b5f604c82b9e7e7f60050734137d602e0f853f1a38201515655b6982f2761ee0fa77c531aa58591c95f0032
-
Filesize
63KB
MD561a5ae75f514b3ccbf1b939e06a5d451
SHA18154795e0f14415fb5802da65aafa91d7cbc57ec
SHA2562b772076c2dba91fb4f61182b929485cc6c660baab4bce6e08aa18e414c69641
SHA512bcd077d5d23fdab8427cc077b26626644b1b4b793c7f445e4f85094bd596c28319a854623b6e385f8e479b52726a9b843c4376bf288dc4f09edc30f332dbaf13
-
Filesize
732KB
MD50606e7d1af5d7420ea2f363a9b22e647
SHA1949e2661c8abf1f108e49ddc431892af5c4eb5ae
SHA25679e60cd8bfd29ad1f7d0bf7a1eec3d9abadfce90587438ea172034074bc174ee
SHA5120fbb16af2523f374c6057e2cb2397cd7ff7eee7e224372fd56a5feada58b0cebb992a9889865d3b971f960ca5f3bc37ff3017474b79ccc9b74aa4d341b7e06fc
-
Filesize
82KB
MD5a62207fc33140de460444e191ae19b74
SHA19327d3d4f9d56f1846781bcb0a05719dea462d74
SHA256ebcac51449f323ae3ae961a33843029c34b6a82138ccd9214cf99f98dd2148c2
SHA51290f9db9ee225958cb3e872b79f2c70cb1fd2248ebaa8f3282afff9250285852156bf668f5cfec49a4591b416ce7ebaaac62d2d887152f5356512f2347e3762b7
-
Filesize
120KB
MD59b344f8d7ce5b57e397a475847cc5f66
SHA1aff1ccc2608da022ecc8d0aba65d304fe74cdf71
SHA256b1214d7b7efd9d4b0f465ec3463512a1cbc5f59686267030f072e6ce4b2a95cf
SHA5122b0d9e1b550bf108fa842324ab26555f2a224aefff517fdb16df85693e05adaf0d77ebe49382848f1ec68dc9b5ae75027a62c33721e42a1566274d1a2b1baa41
-
Filesize
63KB
MD5787b82d4466f393366657b8f1bc5f1a9
SHA1658639cddda55ac3bfc452db4ec9cf88851e606b
SHA256241322647ba9f94bdc3ae387413ffb57ae14c8cf88bd564a31fe193c6ca43e37
SHA512afcf66962958f38eec8b591aa30d380eb0e1b41028836058ff91b4d1472658de9fba3262f5c27ba688bd73da018e938f398e45911cd37584f623073067f575b6
-
Filesize
155KB
MD50c7ea68ca88c07ae6b0a725497067891
SHA1c2b61a3e230b30416bc283d1f3ea25678670eb74
SHA256f74aaf0aa08cf90eb1eb23a474ccb7cb706b1ede7f911daf7ae68480765bdf11
SHA512fd52f20496a12e6b20279646663d880b1354cffea10793506fe4560ed7da53e4efba900ae65c9996fbb3179c83844a9674051385e6e3c26fb2622917351846b9
-
Filesize
49KB
MD57db2b9d0fd06f7bd7e32b52bd626f1ce
SHA16756c6adf03d4887f8be371954ef9179b2df78cd
SHA25624f9971debbd864e3ba615a89d2c5b0e818f9ab2be4081499bc877761992c814
SHA5125b3f55c89056c0bf816c480ed7f8aad943a5ca07bd9b9948f0aa7163664d462c3c46d233ee11dd101ce46dc8a53b29e8341e227fe462e81d29e257a6897a5f3d
-
Filesize
31KB
MD506248702a6cd9d2dd20c0b1c6b02174d
SHA13f14d8af944fe0d35d17701033ff1501049e856f
SHA256ac177cd84c12e03e3a68bca30290bc0b8f173eee518ef1fa6a9dce3a3e755a93
SHA5125b22bbff56a8b48655332ebd77387d307f5c0a526626f3654267a34bc4863d8afaf08ff3946606f3cf00b660530389c37bdfac91843808dbebc7373040fec4c1
-
Filesize
77KB
MD526dd19a1f5285712068b9e41808e8fa0
SHA190c9a112dd34d45256b4f2ed38c1cbbc9f24dba5
SHA256eaabf6b78840daeaf96b5bdbf06adf0e4e2994dfeee5c5e27fefd824dbda5220
SHA512173e1eda05d297d7da2193e8566201f05428437adcac80aecefe80f82d46295b15ce10990b5c080325dc59a432a587eef84a15ec688a62b82493ad501a1e4520
-
Filesize
157KB
MD5ab0e4fbffb6977d0196c7d50bc76cf2d
SHA1680e581c27d67cd1545c810dbb175c2a2a4ef714
SHA256680ad2de8a6cff927822c1d7dd22112a3e8a824e82a7958ee409a7b9ce45ec70
SHA5122bff84a8ec7a26dde8d1bb09792ead8636009c8ef3fa68300a75420197cd7b6c8eaaf8db6a5f97442723e5228afa62961f002948e0eeee8c957c6517547dffba
-
Filesize
24KB
MD5aea6a82bfa35b61d86e8b6a5806f31d6
SHA17c21b7147b391b7195583ab695717e38fe971e3e
SHA25627b9545f5a510e71195951485d3c6a8b112917546fe5e8e46579b8ff6ce2acb0
SHA512133d11535dea4b40afeca37f1a0905854fc4d2031efe802f00dd72e97b1705ca7ffe461acf90a36e2077534fe4df94d9469e99c64dbd3f301e5bca5c327fdc65
-
Filesize
37KB
MD54b5dcc46170e4ac810a59ca5b7533462
SHA11eacf60fdfd427909b54f83518612a4638930225
SHA256704cdcfca773ac658b8f84335f29630707c216f739f7fa5970b1be57f13a5b82
SHA512c2e5b9b40f267f375234be9a562882faa1a0e82f32a951233464d27879d0b1620099bb800de3e96be277bb3bb44ff421a98a2f0c125f28652c2b6415d0fb4dea
-
Filesize
203KB
MD5a7b4711c5ba1866745485abe14101ac7
SHA1c37158cbd0fe67f8acd61596f63cf62bd2985431
SHA2566688f3dd5b7efa8008c5ba776f32cecf5b42887b1b9ee21555ae3e0d4f13d2e0
SHA512f952ad3c21b649e13e64540713a61db6d49b394ca5d62add7a5fec2186a8d27131ba038d449561b77670d3deb2358a8254e4e205ef20228e27b1eb8234d0e843
-
Filesize
34KB
MD52f2a2b2343549e990419df0977e3fac9
SHA15724b63e32bda7d36285f79dc9ad57fc97ba5415
SHA2569569b0b501a0235388d075baa4c84e5d571169ac6ce3ae9220cde31a5f208b94
SHA512a1b99dcaf01666c3ab9755d55001f3a18344cd70c386ce1b2233b5c6b8248b59d95804b450f9ee9c2f51d6293c4e748b9347540ae3f247418a1673bbd6ef466a
-
Filesize
23KB
MD5aa40ac7a7d1d9a10da426701ea49508d
SHA1bbd083535e20ea00bcc40de7b9e625ff5c74851e
SHA256b892cbaf1a5b363fb66768194cd4d466916e81981bcb63c2989277114a4b0c10
SHA512eaf14159f5f1b70dcb5e6416804f306ec5f4c235abf431a27bc421861117be8c6ec5326c8c703c4c3764b771e5dbac37e6b93ac05f9a632bc83788c476eed8e2
-
Filesize
1.7MB
MD5df673df8c5f4b100f5588b8cf1834b68
SHA1dc82a6a581fc4ad98ef94046753a107f3079e2a8
SHA25661f8ceeb90d4321ea6b9593627ee414acac0de654327e703c679aebc8c520c6f
SHA5126836c4bc80a15b89401006d1b061a7ce7c1431b742dcc903bcf027713bf8886189f88e8937dd13bd2c5e21671063adb09939d1c1fcf2db755d8935abd846dc3e
-
Filesize
10KB
MD5fa50d9f8bce6bd13652f5090e7b82c4d
SHA1ee137da302a43c2f46d4323e98ffd46d92cf4bef
SHA256fff69928dea1432e0c7cb1225ab96f94fd38d5d852de9a6bb8bf30b7d2bedceb
SHA512341cec015e74348eab30d86ebb35c028519703006814a2ecd19b9fe5e6fcb05eda6dde0aaf4fe624d254b0d0180ec32adf3b93ee96295f8f0f4c9d4ed27a7c0c
-
Filesize
113KB
MD52d1f2ffd0fecf96a053043daad99a5df
SHA1b03d5f889e55e802d3802d0f0caa4d29c538406b
SHA256207bbae9ddf8bdd64e65a8d600fe1dd0465f2afcd6dc6e28d4d55887cd6cbd13
SHA5124f7d68f241a7f581e143a010c78113154072c63adff5f200ef67eb34d766d14ce872d53183eb2b96b1895aa9c8d4ca82ee5e61e1c5e655ff5be56970be9ebe3e
-
Filesize
50KB
MD534c2dd52c9e920e035444d6cbddeb555
SHA13ff99987b968261e88032652917f137d4a6a0493
SHA25655814d323ee1ec6cd6145ae8f43dbf44d9481e3592aa17b5a17010f7e401ff42
SHA5128f0be0a3e2588bdeff9f5c4eb728ae43a58a19b91596adca0c931d5425a591178f13dcef68b1b949a2c805e1b9963800397f661688fd3c299d7084efe45adaf7
-
Filesize
3.3MB
MD59d7a0c99256c50afd5b0560ba2548930
SHA176bd9f13597a46f5283aa35c30b53c21976d0824
SHA2569b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939
SHA512cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2
-
Filesize
38KB
MD50f8e4992ca92baaf54cc0b43aaccce21
SHA1c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA256eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
SHA5126e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
-
Filesize
688KB
MD5bec0f86f9da765e2a02c9237259a7898
SHA13caa604c3fff88e71f489977e4293a488fb5671c
SHA256d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd
SHA512ffbc4e5ffdb49704e7aa6d74533e5af76bbe5db297713d8e59bd296143fe5f145fbb616b343eed3c48eceaccccc2431630470d8975a4a17c37eafcc12edd19f4
-
Filesize
45KB
MD5b92f8efb672c383ab60b971b3c6c87de
SHA1acb671089a01d7f1db235719c52e6265da0f708f
SHA256b7376b5d729115a06b1cab60b251df3efc3051ebba31524ea82f0b8db5a49a72
SHA512680663d6c6cd7b9d63160c282f6d38724bd8b8144d15f430b28b417dda0222bfff7afefcb671e863d1b4002b154804b1c8af2d8a28fff11fa94972b207df081b
-
Filesize
194KB
MD548e6930e3095f5a2dcf9baa67098acfb
SHA1ddcd143f386e74e9820a3f838058c4caa7123a65
SHA256c1ed7017ce55119df27563d470e7dc3fb29234a7f3cd5fc82d317b6fe559300b
SHA512b50f42f6c7ddbd64bf0ff37f40b8036d253a235fb67693a7f1ed096f5c3b94c2bde67d0db63d84a8c710505a891b43f913e1b1044c42b0f5f333d0fe0386a62c
-
Filesize
65KB
MD57442c154565f1956d409092ede9cc310
SHA1c72f9c99ea56c8fb269b4d6b3507b67e80269c2d
SHA25695086ac060ffe6933ac04a6aa289b1c7d321f14380315e24ba0d6c4adfa0842b
SHA5122bf96828534bcdf71e48d1948b989011d8e3ba757c38cc17905a13d3021ea5deb57e2c68d79507a6acbb62be009cfc85b24d14543958dba1d3bc3e4ca7d4f844
-
Filesize
5.5MB
MD5e2bd5ae53427f193b42d64b8e9bf1943
SHA17c317aad8e2b24c08d3b8b3fba16dd537411727f
SHA256c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400
SHA512ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036
-
Filesize
29KB
MD5756c95d4d9b7820b00a3099faf3f4f51
SHA1893954a45c75fb45fe8048a804990ca33f7c072d
SHA25613e4d9a734a453a3613e11b6a518430099ad7e3d874ea407d1f9625b7f60268a
SHA5120f54f0262cf8d71f00bf5666eb15541c6ecc5246cd298efd3b7dd39cdd29553a8242d204c42cfb28c537c3d61580153200373c34a94769f102b3baa288f6c398
-
Filesize
1.1MB
MD558f7988b50cba7b793884f580c7083e1
SHA1d52c06b19861f074e41d8b521938dee8b56c1f2e
SHA256e36d14cf49ca2af44fae8f278e883341167bc380099dac803276a11e57c9cfa1
SHA512397fa46b90582f8a8cd7df23b722204c38544717bf546837c45e138b39112f33a1850be790e248fca5b5ecd9ed7c91cd1af1864f72717d9805c486db0505fb9c
-
Filesize
65KB
MD50edc0f96b64523314788745fa2cc7ddd
SHA1555a0423ce66c8b0fa5eea45caac08b317d27d68
SHA256db5b421e09bf2985fbe4ef5cdf39fc16e2ff0bf88534e8ba86c6b8093da6413f
SHA512bb0074169e1bd05691e1e39c2e3c8c5fae3a68c04d851c70028452012bb9cb8d19e49cdff34efb72e962ed0a03d418dfbad34b7c9ad032105cf5acd311c1f713