Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

25/08/2024, 17:50

240825-weqzgsyalk 8

25/08/2024, 17:48

240825-wdevtsxhqm 3

10/08/2024, 06:26

240810-g7f8estbkh 9

Analysis

  • max time kernel
    11s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/08/2024, 17:48

General

  • Target

    SG9uZXlwb3Q.exe

  • Size

    1.9MB

  • MD5

    4068c0803b559c904b34b910d8d9ef86

  • SHA1

    e2cc27330b08ccf77a2affb4d60866d8fc3e3f9b

  • SHA256

    70dabd28c39071fb7ec71ef07a604d8a7388af14a23f1ed7a14868986fb2d70d

  • SHA512

    87d9907a284202b0cf3383810593ed66775fd695aa43793a185e1e23ce611336e9936b27a4b387b36a47c8659c75d4a217a7f2d4498b1e42170d0109292825c7

  • SSDEEP

    24576:Y5lYe0j3Z6o2GEr8RgE9QRhAmnjtVLFFAVWtOwjV3SFDFnN65qsyHiPOMXB8sN/w:REoTgYyU1zaCXDXFWGebMYZzCvpp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SG9uZXlwb3Q.exe
    "C:\Users\Admin\AppData\Local\Temp\SG9uZXlwb3Q.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads