Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
176s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23/11/2022, 21:42
General
-
Target
8ba296160b0a3426899c2167ef537ccc567d8046ad34cfadf42bc304164c4850.exe
-
Size
396KB
-
MD5
5328ae97cf6d14c37b1e22e32c65d790
-
SHA1
06a0c7df8801e8de881215905c85ae0b953799aa
-
SHA256
8ba296160b0a3426899c2167ef537ccc567d8046ad34cfadf42bc304164c4850
-
SHA512
d0cc06a61fb9f8280ce9a6811cbf33d312aff4e1b062ae8ec6c1b634bf98692af092d9e41e9bee7ce4ba3c6992e9fe1ad7f8fa0f87b7613b7698c1cd734abdc2
-
SSDEEP
6144:kwuK/7e2njWUrrZzNrtV5knaZS0pl22RTHT6tQD44btL0oLEaqHP4RO8QWoSwaP:k/KpWYl5nxZvlRbT66DbBxvQWoSw
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Identifies Wine through registry keys 2 TTPs 2 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ba296160b0a3426899c2167ef537ccc567d8046ad34cfadf42bc304164c4850.exe"C:\Users\Admin\AppData\Local\Temp\8ba296160b0a3426899c2167ef537ccc567d8046ad34cfadf42bc304164c4850.exe"1⤵
- Identifies Wine through registry keys
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
1.0MB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
1.0MB