Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/09/2024, 01:01

General

  • Target

    c7caf93eaf571f62626bb3c882298c20N.exe

  • Size

    236KB

  • MD5

    c7caf93eaf571f62626bb3c882298c20

  • SHA1

    77e205fd7a0fce0a5bb1e36f7004697959d123be

  • SHA256

    e9d1908d3a2afd4e23bc4c1adb4587ca22f2f7e9b91cd732fff92f7271af9e02

  • SHA512

    65d9c84234ea0f96c1fd92d31744e97d334362848703ec92ffc746fb535b934e1f925328874d8152f67fd29c909125025a693d9244e894f14f1a62b7d1d86d35

  • SSDEEP

    3072:WJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/3/FnncroP9:6wDeM7iNEkgiOb31k1EC3J/F

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c7caf93eaf571f62626bb3c882298c20N.exe
    "C:\Users\Admin\AppData\Local\Temp\c7caf93eaf571f62626bb3c882298c20N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-VBkU3sTaca9jkfKB.exe

    Filesize

    236KB

    MD5

    19e21cc8081b0675423196d0ee094ff9

    SHA1

    d3c901881da1d2a02444db3da62e4424cb740eab

    SHA256

    7a379a63faa5bfeae318cabf19f24e036a53574b17edbc58dfe54af5244d5ca4

    SHA512

    794b5a1e643e9defae7bca5bc4019f7ceae59f180991febf73fb86f33ae1492902cf4e5e55d9cc68897f5e6b05f9c0f33d37a9c37f2ceabd915e2208ab0935a4

  • memory/4772-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/4772-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB