Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
167s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 11:59
General
-
Target
bddec105d517103493b879d8ae14a837b19caf960de91a6ade60e56ca0962c31.exe
-
Size
606KB
-
MD5
a3585cd1b86d8a3b3b6291fffcb92b32
-
SHA1
c1a8ea558252a084e4780e6d81c66ff1eab0bbf2
-
SHA256
bddec105d517103493b879d8ae14a837b19caf960de91a6ade60e56ca0962c31
-
SHA512
6bb36b9dcb79e115edc52400c35a3f9a8ac0274432630996572c653631b9c11735e49ad2ec4b819a1e51cbb1d1eeeb029f4bf3961395b8f11d3d68b049d7f4fd
-
SSDEEP
12288:xO+KVw2jcpK0JLfkL60C75YoEqsxkN4VsGOMZxXExdyagbmt:M4pzWLBI5YgsxkN4V+MZxXa+mt
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bddec105d517103493b879d8ae14a837b19caf960de91a6ade60e56ca0962c31.exe"C:\Users\Admin\AppData\Local\Temp\bddec105d517103493b879d8ae14a837b19caf960de91a6ade60e56ca0962c31.exe"1⤵
- Loads dropped DLL
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x33c 0x38c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
Filesize
579KB
MD5faa9adade265dee564889c7b60390381
SHA1f9ca57d431bc4652dd31211c9ab25e7ed2350b74
SHA2567c9e5ec432bd61a99999c067baa4bf0580652cc4d163600d18c8f518fc24c88a
SHA5123760ff077fdf9fa9a1785261211e96b0b28dacf54d6142d1139345c589765d96818a1b8ab481e271b2735919fff4162c23db7ef3c86c1c4d96dcf029043647c5
-
Filesize
676KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
676KB