Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2024, 02:43

General

  • Target

    e77203b8fcddf38867df6e06bac7b32401fc4abf500f4574f48ba509c27537c5.exe

  • Size

    236KB

  • MD5

    dae7cb9e41bda89e5374de63f828cb87

  • SHA1

    014fc8b559dbdc779a22f87246051a725d3db298

  • SHA256

    e77203b8fcddf38867df6e06bac7b32401fc4abf500f4574f48ba509c27537c5

  • SHA512

    7359c70a86877f88d2074d6d08fa05dc2fd6a0665080dba83db4f5b228c97e35574c483f6ddae00439fa670e15798f075e3ab32d2dbface93beda0f73767c71c

  • SSDEEP

    3072:EJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/c/FnncroP9:IwDeM7iNEkgiOb31k1ECqJ/F

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e77203b8fcddf38867df6e06bac7b32401fc4abf500f4574f48ba509c27537c5.exe
    "C:\Users\Admin\AppData\Local\Temp\e77203b8fcddf38867df6e06bac7b32401fc4abf500f4574f48ba509c27537c5.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-Gxr5uDUsoKQ2BYt4.exe

    Filesize

    236KB

    MD5

    7e5de699aec897f7768e8c9366152a08

    SHA1

    5a33562badefc8caa80e42dcfb52dd2c1c2be506

    SHA256

    da16ed903734da6dade422591eaad8aea87db9df34933a8634c05456156ca909

    SHA512

    134053ae41bc76e57e06d7c07d5755d03d8acb798539887ba8f2fcd9733a39be5b7178e5a4c8ef5ba715a2067c211c5a693918ce9f08e02ccb512474b306a4f8

  • memory/2692-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2692-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB