Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    131s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 16:14

General

  • Target

    SoftwareUpdaterAdmin.exe

  • Size

    337KB

  • MD5

    c3e47f53090ab2d725615dd757c785ae

  • SHA1

    525ae3e94c63f878e26b576fe4810179fa9476f9

  • SHA256

    53b2cbfb47ec74a95ba7543856509c0a62d992596c564ddb308d2c2b9e118323

  • SHA512

    5395ea2950915e7c25de9b9f6a5b47237896147613a4479e96e8c60746f23554b051c5358d2647ff165337f448baa436ad40c26da7ba73ba09c46a8557cd4be7

  • SSDEEP

    6144:yeCZ7XId5OsU1bSd8rF11NzldFtjhDf6wMPnTBrhQFcC7Wd1OUWI:yvZzId5OsU1bSd25VwBTphQ1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SoftwareUpdaterAdmin.exe
    "C:\Users\Admin\AppData\Local\Temp\SoftwareUpdaterAdmin.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3692-0-0x0000000000D30000-0x0000000001404000-memory.dmp

    Filesize

    6.8MB

  • memory/3692-2-0x00000000001F0000-0x0000000000200000-memory.dmp

    Filesize

    64KB

  • memory/3692-1-0x0000000000D30000-0x0000000001404000-memory.dmp

    Filesize

    6.8MB

  • memory/3692-7-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/3692-10-0x000000006FC40000-0x000000006FDA3000-memory.dmp

    Filesize

    1.4MB

  • memory/3692-11-0x0000000061DC0000-0x0000000062344000-memory.dmp

    Filesize

    5.5MB

  • memory/3692-14-0x0000000000D30000-0x0000000001404000-memory.dmp

    Filesize

    6.8MB

  • memory/3692-15-0x000000006A880000-0x000000006AA44000-memory.dmp

    Filesize

    1.8MB

  • memory/3692-13-0x0000000064940000-0x0000000064955000-memory.dmp

    Filesize

    84KB

  • memory/3692-12-0x0000000068880000-0x0000000068EB6000-memory.dmp

    Filesize

    6.2MB

  • memory/3692-9-0x0000000061440000-0x000000006145A000-memory.dmp

    Filesize

    104KB

  • memory/3692-8-0x0000000069700000-0x00000000698B1000-memory.dmp

    Filesize

    1.7MB