Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 01:49

General

  • Target

    bc99663c08aa74ea0043aa5875294439b0e6f66d2d8e5b911f84531b2b7ab316.exe

  • Size

    44KB

  • MD5

    f1b73eceb30f96e223ea0945a1e3a938

  • SHA1

    2e46dedca427eedb279ba5d52801963667ae92e9

  • SHA256

    bc99663c08aa74ea0043aa5875294439b0e6f66d2d8e5b911f84531b2b7ab316

  • SHA512

    0076c6551b141a70deda033f93412bb86786ce6e63a596414476ff5ff23426a5c360fc4f34f611d280a68009fd28f0e770adb16f1dcce0efb48e52c5f68a0c14

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCikGF2xdKJCh5PTnEMen6X2L7UAv7XM:IHzzeWHXbJGB2EOikptEMs6XW7U0M

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bc99663c08aa74ea0043aa5875294439b0e6f66d2d8e5b911f84531b2b7ab316.exe
    "C:\Users\Admin\AppData\Local\Temp\bc99663c08aa74ea0043aa5875294439b0e6f66d2d8e5b911f84531b2b7ab316.exe"
    1⤵
      PID:3232
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1424 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4244

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\My Downloads\Prisoner Of War Key Generator.exe

        Filesize

        44KB

        MD5

        81c615c6f218022909dea77814f06084

        SHA1

        a7acf242febf63d8ad5193a679c268515437a925

        SHA256

        da836c7cc997d14e2eb665698711ee862fe71ff450fe1f3efea93cfe01b050f7

        SHA512

        a3a9f8ef690c7cd8c21b69932ccfee70e0216615c9e5e3a08d2c466c9a6d1daf0d0e3f1a7faf0aaeaee6fcdf06ba3c56916a2d67669dcd007dbb902029d216f6

      • memory/3232-0-0x0000000000400000-0x000000000041A000-memory.dmp

        Filesize

        104KB

      • memory/3232-1-0x0000000000400000-0x000000000041A000-memory.dmp

        Filesize

        104KB

      • memory/3232-102-0x0000000000400000-0x000000000041A000-memory.dmp

        Filesize

        104KB