Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/07/2024, 11:21

General

  • Target

    bdtbxcxzgj/百度贴吧相册下载工具1.10.exe

  • Size

    228KB

  • MD5

    c58258cd70dc829021d6b0d1e0ab01ad

  • SHA1

    d945fc8c7837143dec5d5185e6e611acb67b137b

  • SHA256

    492b3cbd056539579a4f8e9daacc6ff157e97c8dfd5f70b45fe634d683c61adb

  • SHA512

    f27480ea7b0183f6ef28a6fe3073e2246fc404b0d93d3ac03f59b4c489feab40df4aab5c5c5423cad9b43f3c5bf66fe1fbaf3b52018d1574041b04f2d9441a60

  • SSDEEP

    768:r8A/SRfmuVe/FnzMckAWtt6/ZBuKVy2XP8BzfMC4YQ8A/SRfmuVeI3YcOfw:A5S/FnIbAWuuKk2f7C4YR5SI2

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\bdtbxcxzgj\百度贴吧相册下载工具1.10.exe
    "C:\Users\Admin\AppData\Local\Temp\bdtbxcxzgj\百度贴吧相册下载工具1.10.exe"
    1⤵
      PID:4244

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4244-0-0x0000000074C42000-0x0000000074C43000-memory.dmp

      Filesize

      4KB

    • memory/4244-1-0x0000000074C40000-0x00000000751F1000-memory.dmp

      Filesize

      5.7MB

    • memory/4244-2-0x0000000074C40000-0x00000000751F1000-memory.dmp

      Filesize

      5.7MB

    • memory/4244-3-0x0000000074C40000-0x00000000751F1000-memory.dmp

      Filesize

      5.7MB

    • memory/4244-4-0x0000000074C42000-0x0000000074C43000-memory.dmp

      Filesize

      4KB

    • memory/4244-5-0x0000000074C40000-0x00000000751F1000-memory.dmp

      Filesize

      5.7MB