Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

b203de34a6...74.exe

windows7-x64

1

b203de34a6...74.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    191s
  • max time network
    194s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 20:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b203de34a65175e91c897976754b8c1ee97e314dfcce0f933b3230cad42d1a74.exe

  • Size

    93KB

  • MD5

    fcbc695dd94eb2df04d55dcae58a3478

  • SHA1

    71464cb51a2589319a7265e5e29b057fb31f4bb9

  • SHA256

    b203de34a65175e91c897976754b8c1ee97e314dfcce0f933b3230cad42d1a74

  • SHA512

    719a834a6cc6256f1f1eed35a37dbe7af12bfd5bb4180a148e9e28b12cafd8e9b43bcfdb3ceef0c848de098e17f61c9097243ac14f85f59ec565b2014eebb76a

  • SSDEEP

    1536:ytdHjSTL1nPZQfIV94/XrYa5i0Uf6n3VD96HA0OR7hy+U6A1QI5lnCZzTqwejyYX:ytdOTL1nPZcIc/XrZ5i0l3l92Ary+UVm

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b203de34a65175e91c897976754b8c1ee97e314dfcce0f933b3230cad42d1a74.exe
    "C:\Users\Admin\AppData\Local\Temp\b203de34a65175e91c897976754b8c1ee97e314dfcce0f933b3230cad42d1a74.exe"
    1⤵
      PID:4656
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x340 0x150
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:4740

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4656-132-0x00000000003E0000-0x000000000042B000-memory.dmp

      Filesize

      300KB

      Download

    • memory/4656-133-0x00000000003E0000-0x000000000042B000-memory.dmp

      Filesize

      300KB

      Download