Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
30/01/2025, 00:08
Behavioral task
behavioral1
Sample
source_prepared.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
source_prepared.exe
Resource
win10v2004-20241007-en
General
-
Target
source_prepared.exe
-
Size
148.1MB
-
MD5
778c8f42e06a049d2dafa46798e4674e
-
SHA1
d11265afb0d5795b15e380c7f5c7e3b152654b9b
-
SHA256
e1802da5e44a875076df669d76c22835147d66deca4423178ee2736301e0fc99
-
SHA512
6f74a55fb7578ffa7e266a719ff32dc1636cc470cdb1b5e957be6947cfab87ec959fa444355f73b795e2b99d4d2e2f4c6a2eafe5786ba7809a447dfafc2eeb83
-
SSDEEP
3145728:dcgYRPSC++6y9aaAVt/VG6RmtCRlGPrLWf/+2qHO5ipgPpgvp/fgYV:6xaC4y9aZl5mERlu2+HCi7
Malware Config
Signatures
-
Loads dropped DLL 27 IoCs
pid Process 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe 544 source_prepared.exe -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 2208 wrote to memory of 544 2208 source_prepared.exe 83 PID 2208 wrote to memory of 544 2208 source_prepared.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2208 -
C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"2⤵
- Loads dropped DLL
PID:544
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD50376776f076cd4f4ac15ec4d813c5470
SHA1381f84735a11ace4673d8be53138e652d4415413
SHA256a7ddf4d7cab08676bb88a42059353c5374600901b3ab880e17ee1a0d0150c380
SHA51206d68b9e5daf90d05855bf2c57b6110bfc2f20f4731b023b5aaa39145fd3ab66525d39988b8516731045ad16a89eb0457487dd080aeb347ba24a2e47ece98bbd
-
Filesize
576KB
MD501b946a2edc5cc166de018dbb754b69c
SHA1dbe09b7b9ab2d1a61ef63395111d2eb9b04f0a46
SHA25688f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
SHA51265dc3f32faf30e62dfdecb72775df870af4c3a32a0bf576ed1aaae4b16ac6897b62b19e01dc2bf46f46fbe3f475c061f79cbe987eda583fee1817070779860e5
-
Filesize
30KB
MD50fe6d52eb94c848fe258dc0ec9ff4c11
SHA195cc74c64ab80785f3893d61a73b8a958d24da29
SHA256446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f
SHA512c39a134210e314627b0f2072f4ffc9b2ce060d44d3365d11d8c1fe908b3b9403ebdd6f33e67d556bd052338d0ed3d5f16b54d628e8290fd3a155f55d36019a86
-
Filesize
5.7MB
MD5817520432a42efa345b2d97f5c24510e
SHA1fea7b9c61569d7e76af5effd726b7ff6147961e5
SHA2568d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a
SHA5128673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441
-
Filesize
2.4MB
MD5678fa1496ffdea3a530fa146dedcdbcc
SHA1c80d8f1de8ae06ecf5750c83d879d2dcc2d6a4f8
SHA256d6e45fd8c3b3f93f52c4d1b6f9e3ee220454a73f80f65f3d70504bd55415ea37
SHA5128d9e3fa49fb42f844d8df241786ea9c0f55e546d373ff07e8c89aac4f3027c62ec1bd0c9c639afeabc034cc39e424b21da55a1609c9f95397a66d5f0d834e88e
-
Filesize
117KB
MD52cc98f73b52372c8b9cb4f05345968cc
SHA19fc09abf140edc14cbb4e93dbe4afb4764a16057
SHA256641291bbf2cb2069cb5f7b1c6e3dfc8eee45419c08bc2be421c2473d1ab0f813
SHA5126a547c2338affd5b49edc0282749b69b39414f8a427ea35e94f76d3e61b21146b8ffa8bf063f6e813cb965d22948c6821968fc18929fa656437f2bec33edee36
-
Filesize
117KB
MD5862f820c3251e4ca6fc0ac00e4092239
SHA1ef96d84b253041b090c243594f90938e9a487a9a
SHA25636585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
SHA5122f8a0f11bccc3a8cb99637deeda0158240df0885a230f38bb7f21257c659f05646c6b61e993f87e0877f6ba06b347ddd1fc45d5c44bc4e309ef75ed882b82e4e
-
Filesize
48KB
MD568156f41ae9a04d89bb6625a5cd222d4
SHA13be29d5c53808186eba3a024be377ee6f267c983
SHA25682a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
SHA512f7bf8ad7cd8b450050310952c56f6a20b378a972c822ccc253ef3d7381b56ffb3ca6ce3323bea9872674ed1c02017f78ab31e9eb9927fc6b3cba957c247e5d57
-
Filesize
72KB
MD5ad364098aa105e804c8c98d343ec3527
SHA14ebe5696875c94bdbbd6cd031c0593ae89d176af
SHA256bac2870d61a72be50cabc968be924147132036185b3b538aa3b1b43d8c828a2e
SHA512beb0a44a44969abf7290fc560deceac5bd8cee96d560041f783dd439a5f73b340634e451797ac1b67405f655299fce5a20627cbacba4943f7723778fde61497f
-
Filesize
84KB
MD503bad8289d9aa18e859ed7270a719e92
SHA1ee371b1afc7d5be754553d54bd0db8968568c703
SHA256178c6eeb30843e656cc407aaf53ae6d0f170966e4e0bdd2ee1bede73962275cd
SHA5125267906b6daf79e898f87d24b6c0467f75df4c53fe0f44c5dcb02eeffef3b9b7078b2b1af3417ba92ab7586a7968a6b4fdb44b398287cdc1cb0c1dff2e4e9aab
-
Filesize
175KB
MD5fcb71ce882f99ec085d5875e1228bdc1
SHA1763d9afa909c15fea8e016d321f32856ec722094
SHA25686f136553ba301c70e7bada8416b77eb4a07f76ccb02f7d73c2999a38fa5fa5b
SHA5124a0e98ab450453fd930edc04f0f30976abb9214b693db4b6742d784247fb062c57fafafb51eb04b7b4230039ab3b07d2ffd3454d6e261811f34749f2e35f04d6
-
Filesize
124KB
MD5f8d2950d5496d3940aef6758c9e9e576
SHA1ed68c88c14e44871a085e93bf8cf6aabc816ce28
SHA2569ffdedd0f1f09f21870bd75c08d05c32994a1193be3955e367f260690a36cbd0
SHA512ab25ff65abd64f39b156f7aa91c35a327c930f31d3a5d128e67e00c6307e0a0637595ab812931dc2ffec7102e33a2afc746de6267f6130d4f5a8d3445bcded79
-
Filesize
251KB
MD5c68fc0d5c1878d02069503280234e969
SHA198c8e90bf27067a4ff0764c23b95a8b845869736
SHA256847e2b2c69ca623e0f96bbda0f421ca978fbb5925beec4cc5e4c5d9c966c4bbc
SHA512ff745d92beb4c850371b1251c0d81c301a6ce5f6d7d5cb785a5d50dbe17817455eafc32bb6624b24dd074270892fb3fd52a864fcca6e6ea6d46723d3a1c2b6fa
-
Filesize
132KB
MD5cc59a1ca9cf077f345a6872be765d63a
SHA1994f6a8fa1fecce64bec7222d5437df0b99f5f76
SHA2569dead134ccd6c3c2e2bdbed8a02b5853200deb11aa2a22b926f9f2955d3f5143
SHA512b005d2ab4072ae438551897b359f65b4a438404303ef752768b25bf754fd6a4c29fe26392cff47daca8255b83e095d674a768f294e4290d0f6861cfd1adfd1ee
-
Filesize
65KB
MD55b08c2dcbe1b1dea46abbd6c9425878e
SHA18fe7d98d8f3ccab36d92da7e84cdc0f7d10dbadd
SHA256823717926adce6b36f9c13b6555eaeaf5714c4756828f11cffc1ce0bef970a7e
SHA5123843966697558800c639037a34da13f6bd6a0c3816bc0bbd292f04db13acc03f0b79a8fab4c58ad25fe18dd11471bc9dc20cc0d9c97c4c63fbe025ea6242b4d7
-
Filesize
156KB
MD502b16654f73129b1a1220c00d757112d
SHA17ce602e4c2854be7c6b439bc64162d58b1467750
SHA256f6e0c786395ccc7b22f4c435b19f7073eb5974eb29e09f4c91060cab10450e6a
SHA5128daf5d68230d0340e5d940067afca39922078ce94b6753f2be7ae208d7982e87f5273aca768465b110477f83735f4c8e14f7bf95c2a48e2e5457bc723398e541
-
Filesize
35KB
MD53966d8fd4d83fa54db28338ff6087e08
SHA161309a8044bef8b0aa0a7447d3afdfd7502ffebb
SHA256b66a5a1a4aa1f187cc349e7548c3cf6d815552937a6a1d33ecc87b76794a1939
SHA5122203f5e547c74dc0aa177f2708aa09950825f16cfacadf84de005296baf305f08d732ee1e38dafbb80eeec72bf090b56359f5e2df8c28c87ded8ea5552fecf71
-
Filesize
55KB
MD51e467f86ce9bb4dbe682bc0bf41b018a
SHA13a9d3ad208fb41a843d9d4d10f245d6a21266ffc
SHA2560e6081da5bbf8fcd756b02153ab7fca12bd0bc04842abe5765f7409af4987b17
SHA51222271f1c2f709e764d88dbf6fd0ede850f1d2d80992049b88b11f6620e6b055f18f1c55df43d6281ccf8ca84224ac88f72cb03beedd9173888a71a5549b3ac59
-
Filesize
32KB
MD56f8624f0746fa31cf72ef568d6a121f1
SHA11054fb373ea2aa51cb04fe98e6efd130be34fc43
SHA25637622ca591fb8e45a894db9c0da99bfcb18a820a48f028e4949d9256b69247e3
SHA512e52199265a0360027d21034060984dd2100b79faeb03b86cb7a6545da10c00d860117598f659ca38c5bddf368d2f525e4a337011cc78bbce5307baa52588fb9a
-
Filesize
83KB
MD5dc5a5ab89e6e2b48cb50b463b214fd89
SHA1f7740ff9d75767ccdac7aa0dde8659d3133249a2
SHA2560e2c1089974a2757426dac3295201a33c990c36f3c09593f8a2b6e07fd36b99c
SHA51298a886daa82848bc4ca352ec7e7f663822cbad5cd40c5ea7915821097964167d0628af47b8f19f22a825f9696f3199ffbaa94d699ae773a7eb57ae6dc1c3814f
-
Filesize
124KB
MD597c255c1a9db767941d8dad861be443f
SHA1a6d2bbce1c9e882dc1c4a08cfc8425ade036eb3c
SHA256c135f756acf749cb5bac4c4eb48adc06a22a6c5318399ea26763530bd73df5f6
SHA512380325bc4a912a86d83a4783ac42cd7bd0ff0b5cea73652380afb566db3271a94e11fedd19e0c347634a249e0a7e52ee8099ef602bcfa7f39cf0ae41cdf62c6a
-
Filesize
175KB
MD525d4b1c6ca053c573a55d68ae3db5ce2
SHA1ed6bc021e3d5e5ca8083e22b718bc89d55d3ab7f
SHA25681344e3e16cf6f2d5b24cc0cf92e95c5fd0592e4a3859bb00c3f5891e2482128
SHA512396a5432461408059ccda92cc9ca641e68150aad02efcb635dcd3f7d68d9dd09ccec0619705abf3f43a959997b4f8821b726822b89c217c4054f8e8a67eb7fc3
-
Filesize
66KB
MD5324416d395eacb57f680b6c2ae033afe
SHA19a52006193e31ab23312054af665d1e15128ad7c
SHA25696d318146ce3f329209799e4d547c28c0d4b5ab5040da19221ef815540b5f78e
SHA51277799b933a7e7f50a21d2e0a92964397b072aba1ead33ddb60ddfe144c570b40c705780f088a59cb78a0b1c54b15f9b33aab220e7bc3eecf74d2ef479462d616
-
Filesize
27KB
MD57f64ee67cbe4066246e3b98844a781f9
SHA1dab90bf194c51855fff39a8da81da39d47389a36
SHA25620557961ac93ae00829b0865018bcc565e41b52b103d2aa58405a0208ada148f
SHA512a19546f5444c68ef3227dd3ba643d09fa005a9c3e65afffdb5346dc142395e8fb61163764ff255544dae81d305d410cec6620b97030f82f2970f33be763af551
-
Filesize
39KB
MD5e203a46e89f443646cec65d96aceadba
SHA16ec891960ac4b9d501e593157f5e89bcddeb0cb4
SHA256af1077d6377d5a0aea123f0c324cc6d151ac4a29a84aae23a6936b6d1c64b70a
SHA5125678c0cff56e41b59577c13fd206af279831bfca6fa9e56b4fd6f960f3c11834775498ed2d9008a21b6ef65cb2dfffa0152a4e2ad1da4cf198ecceedcb599e4d
-
Filesize
1.3MB
MD50cb8186855e5a17427aa0f2d16e491a9
SHA18e370a2a864079366d329377bec1a9bbc54b185c
SHA25613e24b36c20b3da9914c67b61614b262f3fc1ca7b2ee205ded41acc57865bfef
SHA512855ff87e74e4bd4719db5b17e577e5ae6ca5eedd539b379625b28bccdf417f15651a3bacf06d6188c3fcaac5814dee753bf058f59f73c7050a0716aa7e718168
-
Filesize
5.0MB
MD5123ad0908c76ccba4789c084f7a6b8d0
SHA186de58289c8200ed8c1fc51d5f00e38e32c1aad5
SHA2564e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
SHA51280fae0533ba9a2f5fa7806e86f0db8b6aab32620dde33b70a3596938b529f3822856de75bddb1b06721f8556ec139d784bc0bb9c8da0d391df2c20a80d33cb04
-
Filesize
38KB
MD50f8e4992ca92baaf54cc0b43aaccce21
SHA1c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA256eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
SHA5126e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
-
Filesize
774KB
MD54ff168aaa6a1d68e7957175c8513f3a2
SHA1782f886709febc8c7cebcec4d92c66c4d5dbcf57
SHA2562e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
SHA512c372b759b8c7817f2cbb78eccc5a42fa80bdd8d549965bd925a97c3eebdce0335fbfec3995430064dead0f4db68ebb0134eb686a0be195630c49f84b468113e3
-
Filesize
198KB
MD5ab15ffb93ea7d8abd0a01060eefc39f0
SHA1f90a7fad0c9970cd0d3e94f7b7b7959dfd6fcbc2
SHA256fb0be386ab5bc1695e47e49220f52beee99239bbe85c1749694a8a696054865f
SHA5125df2497c6e76c4bee30bef634d52a815a9112d11dbc737dfe16002d08b5ba885a56dbb56ce1deeeaa46a99fb37d5e350a28937382de443c553e5027be7bec01a
-
Filesize
68KB
MD5acd6bad0ea9a91ce06189bb63d594b41
SHA146ee5089000b5c312739a909662142104d4d8be9
SHA2567c3e2956271eff4949145d14635c0ca659db5ed19215201d2d8b3a4a3d3006f9
SHA51279b888bda9804a9091f5fe8d411f2a81439d3d9618e6bd73a3f729bc977cd8e15914f3fd9f90462331aee431713c8ed7ffe864c975faa6083d7925d17d43b315
-
Filesize
6.6MB
MD5f9a43765b486c561bf0895eb9390ed1f
SHA1b398fbd02bd7fdb32dcb88f11758a0a9826b75a4
SHA2563b56fa10d3797c231468cee42caeaaaff40dbede7bc0d142ec4878493f48e07d
SHA512f2709ba81fe1e01789fc0aae65d31f5adcfd64dd72d161b4cddfa35f91eb2c8d66954925c825b22ce9034fd894ee18500b1ff0a32e4d585491e09d2c540a305c
-
Filesize
32KB
MD5208cef2d2c60a3457b13aa428dceb347
SHA1f78ddbe4be3ff0b21f06aea5f2266625d489470b
SHA256fcac4646ff709ac07aee532c4612a19b7070f2dd6ef67ba09c743644e92f7376
SHA5128b0d14d1c93089368d34bdf49602f4c8e1daa1711c2760eeb2c59a10dbf7611fce098af0f11d7d5aa53d7d07dde39b1f31ecf5f62f7f91f31d7abeed5d828b19
-
Filesize
1KB
MD54ce7501f6608f6ce4011d627979e1ae4
SHA178363672264d9cd3f72d5c1d3665e1657b1a5071
SHA25637fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
SHA512a4cdf92725e1d740758da4dd28df5d1131f70cef46946b173fe6956cc0341f019d7c4fecc3c9605f354e1308858721dada825b4c19f59c5ad1ce01ab84c46b24
-
Filesize
4B
MD5365c9bfeb7d89244f2ce01c1de44cb85
SHA1d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
-
Filesize
1.5MB
MD5e082f3eb41fda914810a1ab45c4054bd
SHA1410b72b64c6ab4280483ae99253d2fe71135a586
SHA256272c41fb992490d32a1b4904b28ef3fad7fbbd07bbdcee625d849960809cf0bd
SHA5129ae3040c9a16090f4bf3c4206a574347476282b296da3f1635a6015812703f80fe7716ff53fdf1d683c7dd706e3657acacc156727ea062cf97697fed63d354b9
-
Filesize
1.8MB
MD506f919d58dfff12b0ee3ab026ea4b627
SHA115473868d33fdfc290470430f649ebd3d9d891c4
SHA256808960f1810e03cfd153be3d9ee9bf01717904c8a23bdcf22d98ff766e33ab96
SHA51298cba91abdac3b074cfcf34bf1db58499f97d3f926ce2e1239973f08f5ef263a9ca8b4a172a5857346f424e7f928c1a546a738287270bee0695aec7e214125e2
-
Filesize
1.5MB
MD574c8892fb92f1cd0002f3114e7559909
SHA1abfb158ff82e822ecef1cb2dae65ac0ec1701974
SHA256aaa0f414484211caf42a0807a3afd70c53b172f59d05dfd9f1fc55244c26dc3b
SHA51278aca417a634d4dd8f3d6fa5f8efa50518f79cb4ebfde18d6b2511e26d7678d8dbfd3aab11bfaf2f39ac5a987e00f580b3949386a3760b6ff719f07494755c14
-
Filesize
1.1MB
MD55e432cca03cd6c18cf4043ed1f3af40a
SHA1f418bc194c3d35298028bb43dc8cff720360eb2b
SHA256e7fe7ae7342b1dec8dfe52a95d768039a46189209b9f42a21c4d2473faaa1753
SHA51202076ef322d23becfe3e24cca5e868a3acb28086dfe83188d82a1a138ad24b9ea097df667bcf8b5486b3306abff0138462e757171a92cd2b58a98a2ac152ec91
-
Filesize
144KB
MD5715caee2086f0f2a2ba14a91b6235c0c
SHA1e9c69fb1a4a28ca5aaa219e056cf62ab8ab45043
SHA256fc431c484e7d6f004d056ac215d6b7e3deb9c41a597065fc840b311e81adf1b8
SHA512afb6ec6c5450fb71b7fc09beea18f925dd4d08fa1abbee121559a2a22dee13278170c004f3c89269e084bfea7107308acdd6db07fb8156a58b51b68839d4442d