Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2024, 18:04

General

  • Target

    403502e7e6f99d352e6dc9bf63946fb6b67e5251f1c63d138bede52ee59bfcfeN.exe

  • Size

    236KB

  • MD5

    e585f05f8f3a065e03eeab133acbb350

  • SHA1

    5ca2dd32b0e2731edfd6aab87b1fadb9db7aec27

  • SHA256

    403502e7e6f99d352e6dc9bf63946fb6b67e5251f1c63d138bede52ee59bfcfe

  • SHA512

    13ba1829230a0e1542ce5051b190d398c67610caa5711658df0a0c0965463a2f2a3bfab4554c9c63393df1b079857ebf79ddde3b94c492c5c0b4427e883a4ff7

  • SSDEEP

    3072:nJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/A/FnncroP9:JwDeM7iNEkgiOb31k1ECeJ/F

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\403502e7e6f99d352e6dc9bf63946fb6b67e5251f1c63d138bede52ee59bfcfeN.exe
    "C:\Users\Admin\AppData\Local\Temp\403502e7e6f99d352e6dc9bf63946fb6b67e5251f1c63d138bede52ee59bfcfeN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-fxMlbS9oAaOsQPHa.exe

    Filesize

    236KB

    MD5

    2fce2b0ca00e0cd22b635b3984995a15

    SHA1

    7ab41155570e099de9b48204094c99f36b5fdcc3

    SHA256

    4e2a9862a2e04d62e7f61537780538d0545e9dbb98de27b6d7a3359f178c353b

    SHA512

    18a408041b945ca0371068cc7238ec1450fd50b847cd92d8a0bb3abc885296d106d6e44a8d9898e5e25a8fe9b3e8e525a9275ea69441b55b3cfb128c2e2a0e83

  • memory/4988-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/4988-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB