Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 07:17

General

  • Target

    c40ee241bfe2451b64a53ba3ced19a10N.exe

  • Size

    236KB

  • MD5

    c40ee241bfe2451b64a53ba3ced19a10

  • SHA1

    518000a4b7798057e3d963ac639a9fe00cdc9c81

  • SHA256

    1ae2545531560fc71c49644d816623ffec956716b71c957c5b7ae20cd0a43dbd

  • SHA512

    8d0be971b7ba91c8151eda977f586f363f9bb695d377316349fed6e40f02addaf4cb10b445184e22a10fc87979cd25e65b2cc9af53108f9f516924ec25110cf5

  • SSDEEP

    3072:BJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/n/FnncroP9:LwDeM7iNEkgiOb31k1ECHJ/F

Score
7/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c40ee241bfe2451b64a53ba3ced19a10N.exe
    "C:\Users\Admin\AppData\Local\Temp\c40ee241bfe2451b64a53ba3ced19a10N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-zmESGsncutCMvq0a.exe

    Filesize

    236KB

    MD5

    9d7c0492ead8cf625f07297b649f7290

    SHA1

    98fc1591a02142f7060b534f7db738b26a104b7b

    SHA256

    fd620cf93c0d3a9166b73ad631ac4535dd2bd3c29cbdd16c3ff60ce9f60ba847

    SHA512

    522959b00faa1c827d5998c43e4b6e6e57433a6b1badc265f8be7cd94a0c80241182e810c536dd9a1eafed5b398fb693c425bad81024efabb2203a9b7cccfade

  • memory/2752-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2752-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB