Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
04/10/2022, 03:15
General
-
Target
e80aa4d7b4ead644f3e9b9a17a0683ebcb72bc852c6c034fb0ea23a08fa61a44.exe
-
Size
224KB
-
MD5
062ca31f5d11475347946477852f9f23
-
SHA1
81970f88ddf11ee144ba368ec4e44f352e5139fe
-
SHA256
e80aa4d7b4ead644f3e9b9a17a0683ebcb72bc852c6c034fb0ea23a08fa61a44
-
SHA512
ec8011f16c5973d1352c8f6b302b3eb6af093a3ab67b9d953a7d4797f43dfcc4dbf89b26ba683e7fa3a349fb4d2b863a37218c9e7904d5e4915e57dc44726b9e
-
SSDEEP
6144:Io/3Nr7Zjsx8Is2EXbIh0HY2yp2IVVhc0Ru3MtyBb+:Io/9rxUJs2ELIeolc6uqma
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e80aa4d7b4ead644f3e9b9a17a0683ebcb72bc852c6c034fb0ea23a08fa61a44.exe"C:\Users\Admin\AppData\Local\Temp\e80aa4d7b4ead644f3e9b9a17a0683ebcb72bc852c6c034fb0ea23a08fa61a44.exe"1⤵
- Checks BIOS information in registry
- Modifies WinLogon
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
992KB
-
Filesize
328KB
-
Filesize
992KB
-
Filesize
672KB
-
Filesize
736KB
-
Filesize
328KB
-
Filesize
992KB