Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
31/05/2024, 16:34
General
-
Target
537d6355448c51449fbe1f7b43ef6ddefbd73bc3843300629b7e57546c25a90e.exe
-
Size
12.9MB
-
MD5
b7bae4cd7026ca4a3692880b73a22fbe
-
SHA1
a473463d5ca9e0fac7958fdef107c075280d4cce
-
SHA256
537d6355448c51449fbe1f7b43ef6ddefbd73bc3843300629b7e57546c25a90e
-
SHA512
9119a9608765e2676dc01085b7b01db7b55224f48bee36cb92e46f6d80641d77f373ead241a7979cc532fe3e31b2d1ebd3596b8e80b0e600e444e040c96c7d48
-
SSDEEP
393216:Ek/6NSxCUC8Hr8xcKUGt/YQAZp167N8qos:PSNSwUC6J1GtA106q9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\537d6355448c51449fbe1f7b43ef6ddefbd73bc3843300629b7e57546c25a90e.exe"C:\Users\Admin\AppData\Local\Temp\537d6355448c51449fbe1f7b43ef6ddefbd73bc3843300629b7e57546c25a90e.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cacls.execacls "" /e /p everyone:n2⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1340 --field-trial-handle=2276,i,11674642242468042059,14711253743544118298,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
233KB
MD5ea3df059beae86a3e186b2b179755e77
SHA1babdcd6b5082c02fa2f5ebc2020f2cb3bbd77e8d
SHA2561ab68a0c296281437fe638c8535309c6241ded4852608d940f5efcb8cc2d91a6
SHA5121406d8083cfbd26e18aba74f6b45a09137bb3960f7afce5c5d0d790b0edb7277b7b885ed2ded9def12b667bcb37cbfb335884b2d7b8f08565743b674d1f053bb
-
Filesize
1KB
MD556564fd57e6761e0eaf2ce20a85ada2d
SHA1e270f5218208fc94ac9596035236d770487fb985
SHA256c16d311e07580aac2520322bc9ffb40b83922d4b3dc644981535d85f8f732128
SHA5127e5fae87861876c2147b91207fa73fdc356d742a17ebd79f97df494aea84b8bde3c7bd65d3b31e6f026a55f1b2a694ed0522aa41065ae3d0a25b86c2dd7cb7c0
-
Filesize
1KB
MD5af70305bac0b8814248580c4e1cb5bda
SHA1c82fe4449e7d299e0e80c865a98637e60f45b3b8
SHA256af76272f4be87ab41c8d2a8a56ba35aec0edf6cec11c309951e9d35a55ccb79c
SHA512530efdabc73216e1a58b1d7854a47b5ee6036744870c9d3dec42905d0d05374c52de24f94a9f738c2aa84b1ba8186e46bdbf75b0de2b36cb2978fe2784c3189f
-
Filesize
761B
MD521fa746f8d554d0f4fd1257bb77fed19
SHA1ef818ec6f9d54b9df90fc1e18fe795f76b22e0de
SHA256f9834c6a2bde77599fc0df69d74d020d12b865de31176a48ad4404809ead8379
SHA512cb6c743b07f31ec5611ef332de1b4fdd1f874a2cb024b5a359226df53616b5f329a72b896b8be4f8292d43bc563115ecc9fd35a697f050c17cbb7392dabaf4a2
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
636KB
-
Filesize
636KB
-
Filesize
4.5MB
-
Filesize
4KB
-
Filesize
96KB
-
Filesize
636KB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB
-
Filesize
4.5MB