Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

16/10/2022, 11:23

221016-nhg7rahec5 1

16/10/2022, 10:59

221016-m3hhkshcbl 1

Analysis

  • max time kernel
    228s
  • max time network
    292s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/10/2022, 11:23

General

  • Target

    992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319.exe

  • Size

    3.7MB

  • MD5

    d1e1314df994a83001db3650d969b629

  • SHA1

    ec259d83c2f749af81d6fc4387e2e2667c4b46df

  • SHA256

    992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319

  • SHA512

    44c86ed830802183a9d771ad337df0355f2973055a523d073207a61495a78aad99c96c62bd5f812adb533aaa418d11fbc595add6725590b39bd0179190b66fe2

  • SSDEEP

    98304:KxUZHT0uACg5lEW4jZC23bVD7hXQdx+0JaJVTR:KxKQukj4jZC2xlXYx+0Jq

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319.exe
    "C:\Users\Admin\AppData\Local\Temp\992cda549f3eb223d1fd87a860ca50370cd74fae3f7b3cd3b5e5db4495c67319.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3588-132-0x000002B94A980000-0x000002B94AD38000-memory.dmp

    Filesize

    3.7MB

  • memory/3588-133-0x00007FF970370000-0x00007FF970E31000-memory.dmp

    Filesize

    10.8MB

  • memory/3588-134-0x00007FF970370000-0x00007FF970E31000-memory.dmp

    Filesize

    10.8MB

  • memory/3588-135-0x000002B969F10000-0x000002B96A3DC000-memory.dmp

    Filesize

    4.8MB

  • memory/3588-136-0x000002B965160000-0x000002B965172000-memory.dmp

    Filesize

    72KB

  • memory/3588-137-0x00007FF970370000-0x00007FF970E31000-memory.dmp

    Filesize

    10.8MB