Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

b85f1b7804...43.exe

windows7-x64

10

b85f1b7804...43.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/08/2024, 06:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b85f1b7804d394e219c9bd9b1851c452355c5c7a28bf06b974a0305dabd26c43.exe

  • Size

    553KB

  • MD5

    1407059ddf52b1b5771a058fa520d027

  • SHA1

    3854791696aedb103b23192e814051ce19605dbf

  • SHA256

    b85f1b7804d394e219c9bd9b1851c452355c5c7a28bf06b974a0305dabd26c43

  • SHA512

    a7d671a06bf29aef69f2aa2862f722102c70d0d7e40ff6415fd38a6a79b69c9a79dc563c05b117d050ccebf3197633e41c0ceefadee99faee8dc2593aa3b6ec5

  • SSDEEP

    12288:eGIvfsf3yXvq7BGs0m19VsXM+cJc3tdh3D0INqH:eGIM6y7B/u8PS9XBq

Score
10/10
mimikatzupx

Malware Config

Signatures

  • Mimikatz

    mimikatz is an open source tool to dump credentials on Windows.

    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\b85f1b7804d394e219c9bd9b1851c452355c5c7a28bf06b974a0305dabd26c43.exe
    "C:\Users\Admin\AppData\Local\Temp\b85f1b7804d394e219c9bd9b1851c452355c5c7a28bf06b974a0305dabd26c43.exe"
    1⤵
      PID:3492

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3492-0-0x00007FF646D00000-0x00007FF646E7D000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/3492-1-0x00007FF646D00000-0x00007FF646E7D000-memory.dmp

      Filesize

      1.5MB

      Download