Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Logged_v1.6.0.exe

windows7-x64

7

Logged_v1.6.0.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    141s
  • max time network
    111s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 18:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Logged_v1.6.0.exe

  • Size

    74.2MB

  • MD5

    a4e57a5c650e3ebfedcd12ffee3fee14

  • SHA1

    406c718d69d6ba536e0d2251fee408b4a84e59bf

  • SHA256

    99615a23c7b5d02e9a0b155d998ab687d29adfef1b57f1f52df511a9a7122d6e

  • SHA512

    54ab3266705762facfa5fbca5475c79ee7a0b8ecd07c3dde20c71a8ecd1df293ec9540384a04594c2337bf2e3244d6bcf68504f77560c2d1a4d7a97674f4dd9a

  • SSDEEP

    1572864:JQwYC+7xMkRCtQkTMT2Zr9yre77nD0CpbeQ/KZYlctCqkFj23tWcC8g2cnrW:J306kkQkTyCAS/DrbSQctXkFj29wbJrW

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 53 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1628
    • C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe
      "C:\Users\Admin\AppData\Local\Temp\Logged_v1.6.0.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:4276
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:1376
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c cls
          3⤵
            PID:3856

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\MSVCP140.dll
        Filesize

        564KB

        MD5

        1ba6d1cf0508775096f9e121a24e5863

        SHA1

        df552810d779476610da3c8b956cc921ed6c91ae

        SHA256

        74892d9b4028c05debaf0b9b5d9dc6d22f7956fa7d7eee00c681318c26792823

        SHA512

        9887d9f5838aa1555ea87968e014edfe2f7747f138f1b551d1f609bc1d5d8214a5fdab0d76fcac98864c1da5eb81405ca373b2a30cb12203c011d89ea6d069af

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\VCRUNTIME140.dll
        Filesize

        106KB

        MD5

        4585a96cc4eef6aafd5e27ea09147dc6

        SHA1

        489cfff1b19abbec98fda26ac8958005e88dd0cb

        SHA256

        a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736

        SHA512

        d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\VCRUNTIME140_1.dll
        Filesize

        48KB

        MD5

        7e668ab8a78bd0118b94978d154c85bc

        SHA1

        dbac42a02a8d50639805174afd21d45f3c56e3a0

        SHA256

        e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f

        SHA512

        72bb41db17256141b06e2eaeb8fc65ad4abdb65e4b5f604c82b9e7e7f60050734137d602e0f853f1a38201515655b6982f2761ee0fa77c531aa58591c95f0032

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_asyncio.pyd
        Filesize

        63KB

        MD5

        61a5ae75f514b3ccbf1b939e06a5d451

        SHA1

        8154795e0f14415fb5802da65aafa91d7cbc57ec

        SHA256

        2b772076c2dba91fb4f61182b929485cc6c660baab4bce6e08aa18e414c69641

        SHA512

        bcd077d5d23fdab8427cc077b26626644b1b4b793c7f445e4f85094bd596c28319a854623b6e385f8e479b52726a9b843c4376bf288dc4f09edc30f332dbaf13

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_brotli.cp311-win_amd64.pyd
        Filesize

        732KB

        MD5

        0606e7d1af5d7420ea2f363a9b22e647

        SHA1

        949e2661c8abf1f108e49ddc431892af5c4eb5ae

        SHA256

        79e60cd8bfd29ad1f7d0bf7a1eec3d9abadfce90587438ea172034074bc174ee

        SHA512

        0fbb16af2523f374c6057e2cb2397cd7ff7eee7e224372fd56a5feada58b0cebb992a9889865d3b971f960ca5f3bc37ff3017474b79ccc9b74aa4d341b7e06fc

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_bz2.pyd
        Filesize

        82KB

        MD5

        a62207fc33140de460444e191ae19b74

        SHA1

        9327d3d4f9d56f1846781bcb0a05719dea462d74

        SHA256

        ebcac51449f323ae3ae961a33843029c34b6a82138ccd9214cf99f98dd2148c2

        SHA512

        90f9db9ee225958cb3e872b79f2c70cb1fd2248ebaa8f3282afff9250285852156bf668f5cfec49a4591b416ce7ebaaac62d2d887152f5356512f2347e3762b7

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_ctypes.pyd
        Filesize

        120KB

        MD5

        9b344f8d7ce5b57e397a475847cc5f66

        SHA1

        aff1ccc2608da022ecc8d0aba65d304fe74cdf71

        SHA256

        b1214d7b7efd9d4b0f465ec3463512a1cbc5f59686267030f072e6ce4b2a95cf

        SHA512

        2b0d9e1b550bf108fa842324ab26555f2a224aefff517fdb16df85693e05adaf0d77ebe49382848f1ec68dc9b5ae75027a62c33721e42a1566274d1a2b1baa41

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_hashlib.pyd
        Filesize

        63KB

        MD5

        787b82d4466f393366657b8f1bc5f1a9

        SHA1

        658639cddda55ac3bfc452db4ec9cf88851e606b

        SHA256

        241322647ba9f94bdc3ae387413ffb57ae14c8cf88bd564a31fe193c6ca43e37

        SHA512

        afcf66962958f38eec8b591aa30d380eb0e1b41028836058ff91b4d1472658de9fba3262f5c27ba688bd73da018e938f398e45911cd37584f623073067f575b6

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_lzma.pyd
        Filesize

        155KB

        MD5

        0c7ea68ca88c07ae6b0a725497067891

        SHA1

        c2b61a3e230b30416bc283d1f3ea25678670eb74

        SHA256

        f74aaf0aa08cf90eb1eb23a474ccb7cb706b1ede7f911daf7ae68480765bdf11

        SHA512

        fd52f20496a12e6b20279646663d880b1354cffea10793506fe4560ed7da53e4efba900ae65c9996fbb3179c83844a9674051385e6e3c26fb2622917351846b9

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_overlapped.pyd
        Filesize

        49KB

        MD5

        7db2b9d0fd06f7bd7e32b52bd626f1ce

        SHA1

        6756c6adf03d4887f8be371954ef9179b2df78cd

        SHA256

        24f9971debbd864e3ba615a89d2c5b0e818f9ab2be4081499bc877761992c814

        SHA512

        5b3f55c89056c0bf816c480ed7f8aad943a5ca07bd9b9948f0aa7163664d462c3c46d233ee11dd101ce46dc8a53b29e8341e227fe462e81d29e257a6897a5f3d

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_queue.pyd
        Filesize

        31KB

        MD5

        06248702a6cd9d2dd20c0b1c6b02174d

        SHA1

        3f14d8af944fe0d35d17701033ff1501049e856f

        SHA256

        ac177cd84c12e03e3a68bca30290bc0b8f173eee518ef1fa6a9dce3a3e755a93

        SHA512

        5b22bbff56a8b48655332ebd77387d307f5c0a526626f3654267a34bc4863d8afaf08ff3946606f3cf00b660530389c37bdfac91843808dbebc7373040fec4c1

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_socket.pyd
        Filesize

        77KB

        MD5

        26dd19a1f5285712068b9e41808e8fa0

        SHA1

        90c9a112dd34d45256b4f2ed38c1cbbc9f24dba5

        SHA256

        eaabf6b78840daeaf96b5bdbf06adf0e4e2994dfeee5c5e27fefd824dbda5220

        SHA512

        173e1eda05d297d7da2193e8566201f05428437adcac80aecefe80f82d46295b15ce10990b5c080325dc59a432a587eef84a15ec688a62b82493ad501a1e4520

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_ssl.pyd
        Filesize

        157KB

        MD5

        ab0e4fbffb6977d0196c7d50bc76cf2d

        SHA1

        680e581c27d67cd1545c810dbb175c2a2a4ef714

        SHA256

        680ad2de8a6cff927822c1d7dd22112a3e8a824e82a7958ee409a7b9ce45ec70

        SHA512

        2bff84a8ec7a26dde8d1bb09792ead8636009c8ef3fa68300a75420197cd7b6c8eaaf8db6a5f97442723e5228afa62961f002948e0eeee8c957c6517547dffba

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\_uuid.pyd
        Filesize

        24KB

        MD5

        aea6a82bfa35b61d86e8b6a5806f31d6

        SHA1

        7c21b7147b391b7195583ab695717e38fe971e3e

        SHA256

        27b9545f5a510e71195951485d3c6a8b112917546fe5e8e46579b8ff6ce2acb0

        SHA512

        133d11535dea4b40afeca37f1a0905854fc4d2031efe802f00dd72e97b1705ca7ffe461acf90a36e2077534fe4df94d9469e99c64dbd3f301e5bca5c327fdc65

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\aiohttp\_helpers.cp311-win_amd64.pyd
        Filesize

        37KB

        MD5

        4b5dcc46170e4ac810a59ca5b7533462

        SHA1

        1eacf60fdfd427909b54f83518612a4638930225

        SHA256

        704cdcfca773ac658b8f84335f29630707c216f739f7fa5970b1be57f13a5b82

        SHA512

        c2e5b9b40f267f375234be9a562882faa1a0e82f32a951233464d27879d0b1620099bb800de3e96be277bb3bb44ff421a98a2f0c125f28652c2b6415d0fb4dea

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\aiohttp\_http_parser.cp311-win_amd64.pyd
        Filesize

        203KB

        MD5

        a7b4711c5ba1866745485abe14101ac7

        SHA1

        c37158cbd0fe67f8acd61596f63cf62bd2985431

        SHA256

        6688f3dd5b7efa8008c5ba776f32cecf5b42887b1b9ee21555ae3e0d4f13d2e0

        SHA512

        f952ad3c21b649e13e64540713a61db6d49b394ca5d62add7a5fec2186a8d27131ba038d449561b77670d3deb2358a8254e4e205ef20228e27b1eb8234d0e843

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\aiohttp\_http_writer.cp311-win_amd64.pyd
        Filesize

        34KB

        MD5

        2f2a2b2343549e990419df0977e3fac9

        SHA1

        5724b63e32bda7d36285f79dc9ad57fc97ba5415

        SHA256

        9569b0b501a0235388d075baa4c84e5d571169ac6ce3ae9220cde31a5f208b94

        SHA512

        a1b99dcaf01666c3ab9755d55001f3a18344cd70c386ce1b2233b5c6b8248b59d95804b450f9ee9c2f51d6293c4e748b9347540ae3f247418a1673bbd6ef466a

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\aiohttp\_websocket.cp311-win_amd64.pyd
        Filesize

        23KB

        MD5

        aa40ac7a7d1d9a10da426701ea49508d

        SHA1

        bbd083535e20ea00bcc40de7b9e625ff5c74851e

        SHA256

        b892cbaf1a5b363fb66768194cd4d466916e81981bcb63c2989277114a4b0c10

        SHA512

        eaf14159f5f1b70dcb5e6416804f306ec5f4c235abf431a27bc421861117be8c6ec5326c8c703c4c3764b771e5dbac37e6b93ac05f9a632bc83788c476eed8e2

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\base_library.zip
        Filesize

        1.7MB

        MD5

        df673df8c5f4b100f5588b8cf1834b68

        SHA1

        dc82a6a581fc4ad98ef94046753a107f3079e2a8

        SHA256

        61f8ceeb90d4321ea6b9593627ee414acac0de654327e703c679aebc8c520c6f

        SHA512

        6836c4bc80a15b89401006d1b061a7ce7c1431b742dcc903bcf027713bf8886189f88e8937dd13bd2c5e21671063adb09939d1c1fcf2db755d8935abd846dc3e

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\charset_normalizer\md.cp311-win_amd64.pyd
        Filesize

        10KB

        MD5

        fa50d9f8bce6bd13652f5090e7b82c4d

        SHA1

        ee137da302a43c2f46d4323e98ffd46d92cf4bef

        SHA256

        fff69928dea1432e0c7cb1225ab96f94fd38d5d852de9a6bb8bf30b7d2bedceb

        SHA512

        341cec015e74348eab30d86ebb35c028519703006814a2ecd19b9fe5e6fcb05eda6dde0aaf4fe624d254b0d0180ec32adf3b93ee96295f8f0f4c9d4ed27a7c0c

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\charset_normalizer\md__mypyc.cp311-win_amd64.pyd
        Filesize

        113KB

        MD5

        2d1f2ffd0fecf96a053043daad99a5df

        SHA1

        b03d5f889e55e802d3802d0f0caa4d29c538406b

        SHA256

        207bbae9ddf8bdd64e65a8d600fe1dd0465f2afcd6dc6e28d4d55887cd6cbd13

        SHA512

        4f7d68f241a7f581e143a010c78113154072c63adff5f200ef67eb34d766d14ce872d53183eb2b96b1895aa9c8d4ca82ee5e61e1c5e655ff5be56970be9ebe3e

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\frozenlist\_frozenlist.cp311-win_amd64.pyd
        Filesize

        50KB

        MD5

        34c2dd52c9e920e035444d6cbddeb555

        SHA1

        3ff99987b968261e88032652917f137d4a6a0493

        SHA256

        55814d323ee1ec6cd6145ae8f43dbf44d9481e3592aa17b5a17010f7e401ff42

        SHA512

        8f0be0a3e2588bdeff9f5c4eb728ae43a58a19b91596adca0c931d5425a591178f13dcef68b1b949a2c805e1b9963800397f661688fd3c299d7084efe45adaf7

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\libcrypto-1_1.dll
        Filesize

        3.3MB

        MD5

        9d7a0c99256c50afd5b0560ba2548930

        SHA1

        76bd9f13597a46f5283aa35c30b53c21976d0824

        SHA256

        9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939

        SHA512

        cb39aa99b9d98c735fdacf1c5ed68a4d09d11f30262b91f6aa48c3f8520eff95e499400d0ce7e280ca7a90ff6d7141d2d893ef0b33a8803a1cadb28ba9a9e3e2

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\libffi-8.dll
        Filesize

        38KB

        MD5

        0f8e4992ca92baaf54cc0b43aaccce21

        SHA1

        c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

        SHA256

        eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

        SHA512

        6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\libssl-1_1.dll
        Filesize

        688KB

        MD5

        bec0f86f9da765e2a02c9237259a7898

        SHA1

        3caa604c3fff88e71f489977e4293a488fb5671c

        SHA256

        d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd

        SHA512

        ffbc4e5ffdb49704e7aa6d74533e5af76bbe5db297713d8e59bd296143fe5f145fbb616b343eed3c48eceaccccc2431630470d8975a4a17c37eafcc12edd19f4

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\multidict\_multidict.cp311-win_amd64.pyd
        Filesize

        45KB

        MD5

        b92f8efb672c383ab60b971b3c6c87de

        SHA1

        acb671089a01d7f1db235719c52e6265da0f708f

        SHA256

        b7376b5d729115a06b1cab60b251df3efc3051ebba31524ea82f0b8db5a49a72

        SHA512

        680663d6c6cd7b9d63160c282f6d38724bd8b8144d15f430b28b417dda0222bfff7afefcb671e863d1b4002b154804b1c8af2d8a28fff11fa94972b207df081b

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\pyexpat.pyd
        Filesize

        194KB

        MD5

        48e6930e3095f5a2dcf9baa67098acfb

        SHA1

        ddcd143f386e74e9820a3f838058c4caa7123a65

        SHA256

        c1ed7017ce55119df27563d470e7dc3fb29234a7f3cd5fc82d317b6fe559300b

        SHA512

        b50f42f6c7ddbd64bf0ff37f40b8036d253a235fb67693a7f1ed096f5c3b94c2bde67d0db63d84a8c710505a891b43f913e1b1044c42b0f5f333d0fe0386a62c

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\python3.DLL
        Filesize

        65KB

        MD5

        7442c154565f1956d409092ede9cc310

        SHA1

        c72f9c99ea56c8fb269b4d6b3507b67e80269c2d

        SHA256

        95086ac060ffe6933ac04a6aa289b1c7d321f14380315e24ba0d6c4adfa0842b

        SHA512

        2bf96828534bcdf71e48d1948b989011d8e3ba757c38cc17905a13d3021ea5deb57e2c68d79507a6acbb62be009cfc85b24d14543958dba1d3bc3e4ca7d4f844

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\python311.dll
        Filesize

        5.5MB

        MD5

        e2bd5ae53427f193b42d64b8e9bf1943

        SHA1

        7c317aad8e2b24c08d3b8b3fba16dd537411727f

        SHA256

        c4844b05e3a936b130adedb854d3c04d49ee54edb43e9d36f8c4ae94ccb78400

        SHA512

        ae23a6707e539c619fd5c5b4fc6e4734edc91f89ebe024d25ff2a70168da6105ac0bd47cf6bf3715af6411963caf0acbb4632464e1619ca6361abf53adfe7036

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\select.pyd
        Filesize

        29KB

        MD5

        756c95d4d9b7820b00a3099faf3f4f51

        SHA1

        893954a45c75fb45fe8048a804990ca33f7c072d

        SHA256

        13e4d9a734a453a3613e11b6a518430099ad7e3d874ea407d1f9625b7f60268a

        SHA512

        0f54f0262cf8d71f00bf5666eb15541c6ecc5246cd298efd3b7dd39cdd29553a8242d204c42cfb28c537c3d61580153200373c34a94769f102b3baa288f6c398

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\unicodedata.pyd
        Filesize

        1.1MB

        MD5

        58f7988b50cba7b793884f580c7083e1

        SHA1

        d52c06b19861f074e41d8b521938dee8b56c1f2e

        SHA256

        e36d14cf49ca2af44fae8f278e883341167bc380099dac803276a11e57c9cfa1

        SHA512

        397fa46b90582f8a8cd7df23b722204c38544717bf546837c45e138b39112f33a1850be790e248fca5b5ecd9ed7c91cd1af1864f72717d9805c486db0505fb9c

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\_MEI16282\yarl\_quoting_c.cp311-win_amd64.pyd
        Filesize

        65KB

        MD5

        0edc0f96b64523314788745fa2cc7ddd

        SHA1

        555a0423ce66c8b0fa5eea45caac08b317d27d68

        SHA256

        db5b421e09bf2985fbe4ef5cdf39fc16e2ff0bf88534e8ba86c6b8093da6413f

        SHA512

        bb0074169e1bd05691e1e39c2e3c8c5fae3a68c04d851c70028452012bb9cb8d19e49cdff34efb72e962ed0a03d418dfbad34b7c9ad032105cf5acd311c1f713

        Download Submit