Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 23:24

General

  • Target

    5f47ced62e1027b2865d02b529fadf70bcfaed5969541ff6d812a2f666050f18.exe

  • Size

    83KB

  • MD5

    16ecc8473f94a7019a709e090d1ff31e

  • SHA1

    e2c87d23de258c0c5d21a194d6799744edf4d027

  • SHA256

    5f47ced62e1027b2865d02b529fadf70bcfaed5969541ff6d812a2f666050f18

  • SHA512

    aa630f3d5c559b0b8921d5952bb16b66c1b0d337f4caae62bf7fdb3810a9f82680ec338d0f29f9e8e7e5ceeef084d641e925869d2145a30e276626b811513f21

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK:LJ0TAz6Mte4A+aaZx8EnCGVut

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5f47ced62e1027b2865d02b529fadf70bcfaed5969541ff6d812a2f666050f18.exe
    "C:\Users\Admin\AppData\Local\Temp\5f47ced62e1027b2865d02b529fadf70bcfaed5969541ff6d812a2f666050f18.exe"
    1⤵
      PID:3160

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-ixEvDupIj4O1gjHy.exe

      Filesize

      83KB

      MD5

      4c413fd28bc570c2303cd6173114a947

      SHA1

      348e10ac58a9fcfdcadcd77498d177b0c879af74

      SHA256

      5338d5f7bdea4fae450541ee44ba62324e8f580b18a9489fe8c6c6725e795b40

      SHA512

      9953a7d9dd0cecee4294dd1bd267e5bcc7da9f61bbfb1fa5e194d68f3fcbb23aa9429845731cf0a93c89a80d72418a8e187e5cad0d11a6bd2f1432c52a549e58

    • memory/3160-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/3160-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/3160-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/3160-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/3160-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/3160-29-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB