Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
11/10/2022, 06:46
General
-
Target
c6ff7ee616ffcdce32915d056fb864f4625ac8c997a8dcb016b41a4fe6d301fe.exe
-
Size
206KB
-
MD5
6b89af09f9d3e6ee8c5e0359f6ea5404
-
SHA1
7dd97a372d568385c64ce1801f968cfb0b6818f7
-
SHA256
c6ff7ee616ffcdce32915d056fb864f4625ac8c997a8dcb016b41a4fe6d301fe
-
SHA512
17e6bb84374b751a37422b2ae49f4ce08bf6cdcd536cf24d925e5d7782483509dac14046f576f1d0bb2b51d7d782001e865ab79f327d9e56440a84d5f63fd440
-
SSDEEP
6144:/zSYVWjgib2rzBEazwn6eANlx1YV6z/xS:Nehb2r1Tw6bnz
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Users\Admin\AppData\Local\Temp\c6ff7ee616ffcdce32915d056fb864f4625ac8c997a8dcb016b41a4fe6d301fe.exe"C:\Users\Admin\AppData\Local\Temp\c6ff7ee616ffcdce32915d056fb864f4625ac8c997a8dcb016b41a4fe6d301fe.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB