Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/09/2024, 07:35

General

  • Target

    d33aa70fb2427e894228cc28f0ece6761b537bb8d48af012ccb69ae00bb2a7c3.exe

  • Size

    4.2MB

  • MD5

    1b87f913f1ab9997cc22a3d9158e2ed8

  • SHA1

    e82479b585e924ec95487f2bd9132b07ecfdd16d

  • SHA256

    d33aa70fb2427e894228cc28f0ece6761b537bb8d48af012ccb69ae00bb2a7c3

  • SHA512

    04a22d116f39e3521764a10f4bdcc4e2283d682e692f98dd8f0fdc25df6e09f07070a7e39d0616e8c18052464aff43d87e786404798c67dcf95326beacebd5fb

  • SSDEEP

    98304:EO2OifYuurgtQxu4ZzrhO9deUYoCSQn0nRWXuskjt4U:EO2Oif8rgtyn0dXYRDnQRWgji

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d33aa70fb2427e894228cc28f0ece6761b537bb8d48af012ccb69ae00bb2a7c3.exe
    "C:\Users\Admin\AppData\Local\Temp\d33aa70fb2427e894228cc28f0ece6761b537bb8d48af012ccb69ae00bb2a7c3.exe"
    1⤵
    • Loads dropped DLL
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\evbC228.tmp

    Filesize

    1KB

    MD5

    cca37e3fbdd0118fb72683e0d1aaee08

    SHA1

    65d26ce1fbc0d484226f8f59c63662450c5719ba

    SHA256

    edc0ec76f726058b55bb529bf712eee9cb6ff849b730609e6f28cf1798fb4d5b

    SHA512

    07e714de5726465bd184d9f39c3296cf7500cb5571ade4bd2990f933b5d1d96ea1f5a2217294f5f3b6c5e0d9361b42e529a451f8ba6191aa05824627fb879cac

  • C:\Users\Admin\AppData\Local\Temp\evbC323.tmp

    Filesize

    1KB

    MD5

    7ad4105c2a827126f6fb409baf3bc752

    SHA1

    2a36d64a5527f8d69fc90bd6e784870a307f52a0

    SHA256

    e8b4df5ca0453ed3fea0e8b5b9c0ea1d1801dc8437dda4bdf498ab70c660aeb3

    SHA512

    2476b4f96d1aa0dc1016d9b5c2a20ceca7af990fecc923286879925f27aaf99a235a1e2ac59fcc90e521df2bfba5b32f7e100c234b566d073253d6272e5b1c50

  • memory/2992-19-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-2-0x00007FFF60A2D000-0x00007FFF60A2E000-memory.dmp

    Filesize

    4KB

  • memory/2992-5-0x0000000180000000-0x00000001808BC000-memory.dmp

    Filesize

    8.7MB

  • memory/2992-15-0x0000000002B70000-0x0000000002BEA000-memory.dmp

    Filesize

    488KB

  • memory/2992-13-0x0000000002B70000-0x0000000002BEA000-memory.dmp

    Filesize

    488KB

  • memory/2992-18-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-0-0x0000000000400000-0x00000000004F6000-memory.dmp

    Filesize

    984KB

  • memory/2992-17-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-20-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-4-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-22-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-21-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-23-0x00007FFF60990000-0x00007FFF60B85000-memory.dmp

    Filesize

    2.0MB

  • memory/2992-24-0x0000000180000000-0x00000001808BC000-memory.dmp

    Filesize

    8.7MB

  • memory/2992-25-0x0000000002B70000-0x0000000002BEA000-memory.dmp

    Filesize

    488KB

  • memory/2992-26-0x0000000000400000-0x00000000004F6000-memory.dmp

    Filesize

    984KB

  • memory/2992-33-0x0000000000400000-0x00000000004F6000-memory.dmp

    Filesize

    984KB