Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    105s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/07/2024, 08:37

General

  • Target

    90419ca746a338ddd25f8cbc67669f30N.exe

  • Size

    236KB

  • MD5

    90419ca746a338ddd25f8cbc67669f30

  • SHA1

    91a930ea0506ed75fa30053127ef1b44d2c596cc

  • SHA256

    1b49f63b6dfeafa76cba86803f967ee40a550c858f506179377f04bad9e24757

  • SHA512

    1da434e85d892731a85d7d7958eb905d9b2a096210332660031d3ee1322a9fdb8240d2bd49533766340729880fc385d18a1940acbf313779845f0fcfbf4c2559

  • SSDEEP

    3072:/J0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/z/FnncroP9:hwDeM7iNEkgiOb31k1ECjJ/F

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\90419ca746a338ddd25f8cbc67669f30N.exe
    "C:\Users\Admin\AppData\Local\Temp\90419ca746a338ddd25f8cbc67669f30N.exe"
    1⤵
      PID:1512

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-zlOTQEylKr9NthPw.exe

      Filesize

      236KB

      MD5

      4f042d66f37256b947dead37f239bc18

      SHA1

      783818479d6ba1a1a6cd5485aee084f2b0eb1902

      SHA256

      6b77b673804eb93832efca8d8c321701eb68b0495cec955f71e8aca1a4acc5cc

      SHA512

      0a20bd41a429216a0326d71a6fd65d058b1dfc08323a37ef83a73c17c47d2f6b02175d2ba1f01155bff4da8f2a7d682edbc3bad3036e23f114153b843de83f11

    • memory/1512-0-0x0000000000400000-0x000000000043B000-memory.dmp

      Filesize

      236KB

    • memory/1512-1-0x0000000000400000-0x000000000043B000-memory.dmp

      Filesize

      236KB