Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    5s
  • max time network
    9s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/06/2024, 23:17

General

  • Target

    Reflector.exe

  • Size

    6.1MB

  • MD5

    dd5241ea3b3a006876ad4114576b1045

  • SHA1

    2b00423bf618a15bfe31272abda6ea548e5a39dd

  • SHA256

    5e207156135f618dc01354b1dac5afe43403ac2099ad25b59be37362080bc649

  • SHA512

    197d5879874e75841007be5ec68baefdd158f05b70ec12265bded9653c43d868c89a2b45e73d4f17f98e45bcb98bc8166c20bde0436d54f617795db3158b86f2

  • SSDEEP

    49152:3DuipbwbZR7IeG3/3K3+/ulVlVD+4Yx1tMOqIx4KHmVL6oorBtIm:qdRsSOGlVlbYxjMOXrBR

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Reflector.exe
    "C:\Users\Admin\AppData\Local\Temp\Reflector.exe"
    1⤵
    • Checks processor information in registry
    PID:4788
  • C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    1⤵
      PID:2352

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2352-7-0x00007FFD5BB55000-0x00007FFD5BB56000-memory.dmp

      Filesize

      4KB

    • memory/2352-13-0x00007FFD5B8A0000-0x00007FFD5C241000-memory.dmp

      Filesize

      9.6MB

    • memory/2352-12-0x000000001A660000-0x000000001A796000-memory.dmp

      Filesize

      1.2MB

    • memory/2352-11-0x00007FFD5B8A0000-0x00007FFD5C241000-memory.dmp

      Filesize

      9.6MB

    • memory/2352-10-0x0000000019F90000-0x000000001A364000-memory.dmp

      Filesize

      3.8MB

    • memory/2352-9-0x00007FFD5B8A0000-0x00007FFD5C241000-memory.dmp

      Filesize

      9.6MB

    • memory/2352-8-0x0000000000880000-0x00000000008A0000-memory.dmp

      Filesize

      128KB

    • memory/4788-1-0x00000000778D2000-0x00000000778D3000-memory.dmp

      Filesize

      4KB

    • memory/4788-6-0x0000000074940000-0x0000000074EF1000-memory.dmp

      Filesize

      5.7MB

    • memory/4788-5-0x0000000074940000-0x0000000074EF1000-memory.dmp

      Filesize

      5.7MB

    • memory/4788-4-0x0000000074940000-0x0000000074EF1000-memory.dmp

      Filesize

      5.7MB

    • memory/4788-0-0x0000000000400000-0x0000000000A06000-memory.dmp

      Filesize

      6.0MB

    • memory/4788-2-0x00000000778D3000-0x00000000778D4000-memory.dmp

      Filesize

      4KB

    • memory/4788-3-0x0000000074942000-0x0000000074943000-memory.dmp

      Filesize

      4KB

    • memory/4788-14-0x0000000002D50000-0x0000000002D60000-memory.dmp

      Filesize

      64KB