Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10/08/2024, 01:25
General
-
Target
OpenMe.exe
-
Size
21.3MB
-
MD5
6846908b223e58f24f7e224d9d402225
-
SHA1
7fde424cacf6c5766db7d24dc5e03ecfd2898d15
-
SHA256
55d8eee45262b53bef2f2391a01b723e019b95e87145d32fb18fce3eb9063cfd
-
SHA512
156436f2e45b7e01d5cc52ef283ae155f694fdc1babdf06f77a1c0e43532ec2d436e30a520cf05817804b99525fcc349af6d37b8800e207485001bff7ed2b0ae
-
SSDEEP
393216:2itMU6rX/ULYPDFYN4OgVKikmWekMIqS3r+6qhFsbo:2icX/Uo5YN4OakmWekMKr+6cqbo
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\OpenMe.exe"C:\Users\Admin\AppData\Local\Temp\OpenMe.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3928,i,4356837537417149674,16553092232944545509,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.9MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
36.2MB
-
Filesize
36.2MB
-
Filesize
36.2MB
-
Filesize
14.9MB