Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
172s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 21:34
Behavioral task
behavioral1
Sample
d77346745325751a39d77202e83af104ed44a7b02ba1545b909bad4160425b2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d77346745325751a39d77202e83af104ed44a7b02ba1545b909bad4160425b2d.exe
Resource
win10v2004-20220812-en
General
-
Target
d77346745325751a39d77202e83af104ed44a7b02ba1545b909bad4160425b2d.exe
-
Size
37KB
-
MD5
922268ef8785adb812525c3fd4372710
-
SHA1
1b440f720963596ba5fc4bdb3e5085528d1cb559
-
SHA256
d77346745325751a39d77202e83af104ed44a7b02ba1545b909bad4160425b2d
-
SHA512
dc144e667e18bbe0241651b3cc10159d2653499c22d406d35f7bbcdf6e1c838d4522d4818c6ced3b3e77638943a26846a1d3aaddea1490d3954524a70b0b1837
-
SSDEEP
768:mtcXQU7ao9ALzICT5PlopIh+u7lf7OwxgV0nbcuyD7U0rsSKBdo:mtNHLzICTzh+uJzNnouy804Bdo
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3364-135-0x0000000000400000-0x0000000000417000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3364 d77346745325751a39d77202e83af104ed44a7b02ba1545b909bad4160425b2d.exe