Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
06/06/2024, 16:05
General
-
Target
MEmu-setup-abroad-sdk-mv2 (1).exe
-
Size
23.0MB
-
MD5
e84f54112e5ca9e499383ebb8d5728c0
-
SHA1
d0e1df5ee9ead2a26ba7df06b899770f13397c6a
-
SHA256
b2f95778fb051f8acecb6be7b9162b94f8df366ed33908cd78e88dfd6ec2a6a3
-
SHA512
e0813d5d58dfbbcdc281c8e04962c59f6185c0524caeb91fd77adeb539020eea53878eb1def083b377e9c6d03dc43688d68a94ef7d3cc3a9cb9fa202add1ff6e
-
SSDEEP
393216:gLn778Sd3o+84Jsv6tWKFdu9Ck7vUiPbKv647n+YlmYo:27Iq3orD2vegmP
Malware Config
Signatures
-
Downloads MZ/PE file
-
Loads dropped DLL 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MEmu-setup-abroad-sdk-mv2 (1).exe"C:\Users\Admin\AppData\Local\Temp\MEmu-setup-abroad-sdk-mv2 (1).exe"1⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
MD548f07e86c6d50f527d7fd5026a3fbe5c
SHA164184c950bc0622df2c8e7707d37fae566ee5722
SHA256b1317206a12f105e28338fea33c5d1a66df07fb35586bb4e1727555bec90e71b
SHA5129172b41d51643349cb0d755d1f90ffbe15cb7bd4ed80700d91c73f4afba17055f0488fd1d5858dea2843d545fd4752751d081dcf2117204cafe0f6fc3cf30c5d
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
4KB