Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    89s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 11:17

General

  • Target

    96a5e9223e13332c4d9438468ca036a51e3a760e33db79ac2fc4fd2f5f2f9fcb.exe

  • Size

    131KB

  • MD5

    4dc5a50e5f8e2a6cb04bb097caf4e4b0

  • SHA1

    337d054d921e33dc200e427a1a6eec9d9552bc2b

  • SHA256

    96a5e9223e13332c4d9438468ca036a51e3a760e33db79ac2fc4fd2f5f2f9fcb

  • SHA512

    feb3d4d1bf36da8ac389e693f8756b00a578fa37b2af6cb54160fbb4862005119bb90810c23105c7c009258861ec0093e2c7fcc47758aa95d3418c2bf713aacf

  • SSDEEP

    1536:dNxU+W+73uSpoo3e/8+dcr2ySWuGsaj/UCP0z0Wlxo3K7PfkMpsuNxvFFNy/Hz:VU+W+qNo3e9Sy/WuRaezPM3K73kuIb

Score
8/10

Malware Config

Signatures

  • Sets file execution options in registry 2 TTPs 2 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in System32 directory 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\96a5e9223e13332c4d9438468ca036a51e3a760e33db79ac2fc4fd2f5f2f9fcb.exe
    "C:\Users\Admin\AppData\Local\Temp\96a5e9223e13332c4d9438468ca036a51e3a760e33db79ac2fc4fd2f5f2f9fcb.exe"
    1⤵
    • Sets file execution options in registry
    • Adds Run key to start application
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2716

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads