Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

22/09/2022, 16:59 UTC

220922-vhr6aafgbk 10

20/09/2022, 10:36 UTC

220920-mm81lagdcj 1

Analysis

  • max time kernel
    83s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/09/2022, 16:59 UTC

General

  • Target

    521533fe8439f70f3e4446312df30bec85326767b02f76af4bec39b251e15c81.exe

  • Size

    25KB

  • MD5

    abfc01f92a6983fed77f136d7b6a4312

  • SHA1

    953f32c6b64ea7ccea9d40c528b4ce6cfb6141ad

  • SHA256

    521533fe8439f70f3e4446312df30bec85326767b02f76af4bec39b251e15c81

  • SHA512

    5d2333052114434061402e4bcbe67280659a4d4519297c52fc207d117d3ab12cd6ccfa6e3920d99c12011404abf67248ab73b342c401934d7121440998486166

  • SSDEEP

    384:GQRUDfYkNDR6Yabb/9Sc7oLO0ApNQE1M9Z4XsC5JVTuWsTkly80CLlcIeoRzQ9S5:9R4DqbzT/mZ4cCxuXY02soNaM

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\521533fe8439f70f3e4446312df30bec85326767b02f76af4bec39b251e15c81.exe
    "C:\Users\Admin\AppData\Local\Temp\521533fe8439f70f3e4446312df30bec85326767b02f76af4bec39b251e15c81.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1604

Network

    No results found
  • 108.62.12.122:80
    521533fe8439f70f3e4446312df30bec85326767b02f76af4bec39b251e15c81.exe
    260 B
    5
  • 8.238.110.126:80
    322 B
    7
  • 108.62.12.122:80
    521533fe8439f70f3e4446312df30bec85326767b02f76af4bec39b251e15c81.exe
    260 B
    5
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.