Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 09:10

General

  • Target

    GBCLICEEGALJEMCFEMBF.exe

  • Size

    25.4MB

  • MD5

    142ce368a901a5bfd53be992b25ca8e8

  • SHA1

    e636c658aeb46fa72aaa3e77add748f13264ef34

  • SHA256

    e9e846182ad29c52c923483922f969abd092788f6d64e2db307d888967793b7e

  • SHA512

    e2570e82b4670c9a4e54013e77e82e534b7b867480584eac4e13500b0fb82504421908369b7dbc3eef29c1cd883d4f38568e94c58406ed18673666914e5f7f8a

  • SSDEEP

    393216:FsdlngpATW6W7jzzTf9sJ5+NwTFBU7ywDBvUZ1LwppjSJ9tupJM:Fsdlnn1W7jznmT+NmBYmApGztI

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GBCLICEEGALJEMCFEMBF.exe
    "C:\Users\Admin\AppData\Local\Temp\GBCLICEEGALJEMCFEMBF.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:3680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3680-0-0x00007FF770AE0000-0x00007FF7719A7000-memory.dmp

    Filesize

    14.8MB

  • memory/3680-2-0x00007FFBDD7A0000-0x00007FFBDD7A2000-memory.dmp

    Filesize

    8KB

  • memory/3680-1-0x00007FFBDD790000-0x00007FFBDD792000-memory.dmp

    Filesize

    8KB

  • memory/3680-3-0x00007FF770190000-0x00007FF77331A000-memory.dmp

    Filesize

    49.5MB

  • memory/3680-7-0x00007FF770190000-0x00007FF77331A000-memory.dmp

    Filesize

    49.5MB

  • memory/3680-8-0x00007FF770AE0000-0x00007FF7719A7000-memory.dmp

    Filesize

    14.8MB