Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
26/11/2022, 22:36
General
-
Target
66df00ffb1e94e214f0ea4e22781bbc9befd42655e46fa581c45a134e032c1ef.exe
-
Size
386KB
-
MD5
2f5de0c63d421ce53d63c8c00a4106b0
-
SHA1
c3ccd77898740ce25644f854112ae89dac674bce
-
SHA256
66df00ffb1e94e214f0ea4e22781bbc9befd42655e46fa581c45a134e032c1ef
-
SHA512
60e8e4df816076e3b819bf23db71eb1c519bd9a6e1d23772992e8f3ec8f7198e48981d82fef311765103ffebd08be14fd01949e1309954ce798d08581a9cb811
-
SSDEEP
6144:cGwofmmdm1d7h+gwogji3fl3gPEh/t7sTR0gWiBGRLpGk/s:cG0mdmnt+3MlQMhJsnWwGRLpG1
Score
10/10
Malware Config
Signatures
-
Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\66df00ffb1e94e214f0ea4e22781bbc9befd42655e46fa581c45a134e032c1ef.exe"C:\Users\Admin\AppData\Local\Temp\66df00ffb1e94e214f0ea4e22781bbc9befd42655e46fa581c45a134e032c1ef.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\66df00ffb1e94e214f0ea4e22781bbc9befd42655e46fa581c45a134e032c1ef.exe"C:\Users\Admin\AppData\Local\Temp\66df00ffb1e94e214f0ea4e22781bbc9befd42655e46fa581c45a134e032c1ef.exe"2⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
296KB
-
Filesize
5.7MB
-
Filesize
5.7MB