Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
05/12/2022, 08:45
General
-
Target
95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9.exe
-
Size
206KB
-
MD5
815d2b15498f88239ae8557655c62609
-
SHA1
d0a181764abd86f8a1bf9736cd5a7b29f842dc93
-
SHA256
95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9
-
SHA512
1d5c5d813558e81b429a6cc232c2f93c590fc4e651676dff441fd873c6e92fa80b07cf55b011921047ab699178d870e90bc0e04d906e89a6b3b8fe12d398f835
-
SSDEEP
6144:1BC1Q7cIkNzakJen1IwtVKeKy23y0I6Q1hM:1BC1Q7NEWkJen1I8VJKy2i0fAh
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9.exe"C:\Users\Admin\AppData\Local\Temp\95f3bedbe8eab49d6ecbe022dc465d281e4ea91b69807859c3dc6a375b2d89a9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB