Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    458s
  • max time network
    1181s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    31/05/2024, 09:54

General

  • Target

    Umbral-DESKTOP-558UR6G.zip

  • Size

    5.7MB

  • MD5

    42f95a8bfcc949a58e81d3919656d8c0

  • SHA1

    63933466c7a87d48dcfc786dc0964540061b51ff

  • SHA256

    e1f0a6b68859d363b72384c98c8f6a0466445911908d45967b8491d3829abf65

  • SHA512

    73b8ff3c118010dbce8492b075822b494c4a9a16e0d9aa976b8ace1ad2ab08b5c3c0f40efb90157d946d6d9579224b4eab52153c028d98a915a5ee177d04c76d

  • SSDEEP

    98304:eprzHLuyU/O8o7bnXZlZeMyvGYyL8O25uz9m3SbyL9wE5+vm0u+6Db+DkvhHl1K4:edPuyiO8o/JlZeMglyL8jSbmr5nl+6ig

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Umbral-DESKTOP-558UR6G.zip
    1⤵
      PID:3736
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1592
      • C:\Windows\system32\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Temp1_Umbral-DESKTOP-558UR6G.zip\Messenger\Discord\Discord Accounts.txt
        1⤵
          PID:3976

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads