Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/01/2025, 06:48

General

  • Target

    5333fed1ecff3d2db7ed40c174679e1840d8bc762dcf5223f5fab793dd57ec2d.exe

  • Size

    236KB

  • MD5

    99536d58d2b671ac7f348c2b085df51b

  • SHA1

    5e177911ad78760ec6281ce03153657dc54c5aa8

  • SHA256

    5333fed1ecff3d2db7ed40c174679e1840d8bc762dcf5223f5fab793dd57ec2d

  • SHA512

    7667a78dce1f80f3c277105481fbe94c526103c1f123994ae5a9a4df4c7dcb959ffd3cf366c00190651d240ce72033ee79c55bc18d1b194301944391396de708

  • SSDEEP

    3072:xJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/c/FnncroP9v:7wDeM7iNEkgiOb31k1EC6J/Fv

Score
5/10

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5333fed1ecff3d2db7ed40c174679e1840d8bc762dcf5223f5fab793dd57ec2d.exe
    "C:\Users\Admin\AppData\Local\Temp\5333fed1ecff3d2db7ed40c174679e1840d8bc762dcf5223f5fab793dd57ec2d.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2468

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\rifaien2-9c4yMzOAeeyHS1AR.exe

    Filesize

    236KB

    MD5

    9334072471284e81cbbb0690d6d44847

    SHA1

    4d42b3223dc9fab8de3f09cc661aed3787fbafba

    SHA256

    f257f0a6ee18440998468b43c410b3d1e0801a66d22494686713467a43704177

    SHA512

    9e44cb450622d280b9640da9d363d10fe0b08d686f00224163d1951ba88fde92261c629bb5d689d4a79aa4b7d386c6f5a3270f26edd53c3efb5456a6811bd12e

  • memory/2468-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/2468-1-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB