Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05/12/2022, 11:17
General
-
Target
9b70703453eb80f60f513e5137d25aa18b0a0d81430ab0e0bee7e9258597b08b.exe
-
Size
215KB
-
MD5
4096b79465c5ca13a51d3796e45b2fb7
-
SHA1
926df40f8eca0d24dfb3a2d52d76c21e8485594f
-
SHA256
9b70703453eb80f60f513e5137d25aa18b0a0d81430ab0e0bee7e9258597b08b
-
SHA512
ea104e334cb8f67da73b5fbdab10ca0484bf6c43c548722d8c1e21af7b571329fe3be847f5c7d7d95fddca8d6cbe3d2b18e29d7d1fe0b632d737d7cbf39f04dd
-
SSDEEP
3072:asqSArBa4ElitwFx0iTME/R7QanRiyKdbnnVD4QSamvWTdcHiBPc/tS8Ey0P:aFxBa4VCx0FE/B9mdbnVDB5N1Buzi
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b70703453eb80f60f513e5137d25aa18b0a0d81430ab0e0bee7e9258597b08b.exe"C:\Users\Admin\AppData\Local\Temp\9b70703453eb80f60f513e5137d25aa18b0a0d81430ab0e0bee7e9258597b08b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
284KB