Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
11/10/2022, 17:37
General
-
Target
d478c33a5a960b15c4b70d0f75b9ad4d10e59ae65da4161d5bc6ffdf902da5fa.exe
-
Size
229KB
-
MD5
4f4cc61af78b4504827dcda4294f8c9a
-
SHA1
40fc6ae4c8fe89cb2a4e2be2e62fb132aa392c8c
-
SHA256
d478c33a5a960b15c4b70d0f75b9ad4d10e59ae65da4161d5bc6ffdf902da5fa
-
SHA512
cbe2adf1effbe692b8d2f0555cdccce03f4dfe0f60c939981e6019a6f7b4dc39c370755c147a83643d1309ebe9068af4b0cf9a6083b7056607a5a3d02edbf6d1
-
SSDEEP
6144:XpoQ/WM4+jKUC4aL3q8Ii7ACcKsIEBEjheDRXy8A:eQeM4++UPauGps7B8epDA
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Users\Admin\AppData\Local\Temp\d478c33a5a960b15c4b70d0f75b9ad4d10e59ae65da4161d5bc6ffdf902da5fa.exe"C:\Users\Admin\AppData\Local\Temp\d478c33a5a960b15c4b70d0f75b9ad4d10e59ae65da4161d5bc6ffdf902da5fa.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
168KB
-
Filesize
244KB
-
Filesize
168KB