Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
14/07/2024, 16:09
General
-
Target
0988b5532a47fd87a6993b15b4679500N.exe
-
Size
59KB
-
MD5
0988b5532a47fd87a6993b15b4679500
-
SHA1
8a51bf8dd7668ab4964e79ebbb0e47d515fb80e4
-
SHA256
d9c727b58f65bd9a37155b760078d827b0d444769ec055cfae7b3d0889205779
-
SHA512
351a7ee29dc5177a6780d843190329a15e2d92e63713d4eba8f0a3c7141614d4b2ca9399d0e05c8efd993df88575a192cd1facb7945d6d0a4b1489f5967e81b4
-
SSDEEP
1536:14vnuZU68CrFQmhRYJtgQJJfJc425qIAoW5kDZ:UuKUr2mTAgMujIaW
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0988b5532a47fd87a6993b15b4679500N.exe"C:\Users\Admin\AppData\Local\Temp\0988b5532a47fd87a6993b15b4679500N.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0988b5532a47fd87a6993b15b4679500N.exeC:\Users\Admin\AppData\Local\Temp\0988b5532a47fd87a6993b15b4679500N.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
59KB
MD51cfd2a585fbfa94bb5b51e53a0356d51
SHA1d319117f13ff7d4e39b9116653844b6f80a0092b
SHA2566753c6bc299d390745b5beed9398e5e9fd36f8e98799d2ebc543d5c7014431bf
SHA512ab3a32c4b95db72b2a42eb3404ae8b17de0f2c20ed7ba25fde84016bc8d17ed354e8fba35a8655b21e10f8dc7abdea81f688839d3c57ac291e89b848de44db77
-
Filesize
244KB
-
Filesize
116KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
116KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
60KB
-
Filesize
116KB
-
Filesize
116KB