Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    133s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    10/07/2024, 23:51

General

  • Target

    8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9.exe

  • Size

    588KB

  • MD5

    b60298888a31a783e5fbfcdbd2b87975

  • SHA1

    cd03277cafd52e5041763dea782e1e5d65aa6f61

  • SHA256

    8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9

  • SHA512

    0fb956258eb6e8333424249e9cc61c9d31e4ebf8b5b277ded02c144a5a7a594f6f2fa0002a6218e9d13fdc09451c0cfd1ac97fa6d2de749ee917dfb7d55c3000

  • SSDEEP

    12288:txYLhzKMEivLyye381n1AO3h9xL5AF197gZHe:QhLE6Ly98x1AenAF1xKHe

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9.exe
    "C:\Users\Admin\AppData\Local\Temp\8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2420-1-0x0000000002BA0000-0x0000000002CA0000-memory.dmp

    Filesize

    1024KB

  • memory/2420-2-0x00000000046C0000-0x000000000472B000-memory.dmp

    Filesize

    428KB

  • memory/2420-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/2420-4-0x0000000000400000-0x000000000287B000-memory.dmp

    Filesize

    36.5MB

  • memory/2420-5-0x0000000000400000-0x000000000287B000-memory.dmp

    Filesize

    36.5MB

  • memory/2420-7-0x0000000002BA0000-0x0000000002CA0000-memory.dmp

    Filesize

    1024KB

  • memory/2420-8-0x00000000046C0000-0x000000000472B000-memory.dmp

    Filesize

    428KB

  • memory/2420-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB