Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    137s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/12/2022, 15:56

General

  • Target

    a6d2acabf75d5419193684713cc138d3515473526dccace48be6bfd20a193d25.exe

  • Size

    334KB

  • MD5

    4b5efa065cbd39d2d7ee8a61b7020670

  • SHA1

    62f2c15999a3654625df00220773b7dc250f46f3

  • SHA256

    a6d2acabf75d5419193684713cc138d3515473526dccace48be6bfd20a193d25

  • SHA512

    cac52af06940ad8bf5eeb3eb0d47a7446d565c72b628d7c681f5e98e25cfff5931bd106c77c4e97bb055ddceb44572252441b3c4442456de0f831bed253a718b

  • SSDEEP

    6144:Nih+LtzttTP5kBNJaOOaQ9WgdgGdecwvp0YfVXcD/tVgn4g3CnU0V6:NiwRznTPwZQbRdeceBE/tVgn3SUO

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a6d2acabf75d5419193684713cc138d3515473526dccace48be6bfd20a193d25.exe
    "C:\Users\Admin\AppData\Local\Temp\a6d2acabf75d5419193684713cc138d3515473526dccace48be6bfd20a193d25.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3076-132-0x00000000006B2000-0x00000000006E0000-memory.dmp

    Filesize

    184KB

  • memory/3076-134-0x0000000004BA0000-0x0000000005144000-memory.dmp

    Filesize

    5.6MB

  • memory/3076-135-0x0000000000400000-0x000000000047D000-memory.dmp

    Filesize

    500KB

  • memory/3076-133-0x00000000005F0000-0x000000000063B000-memory.dmp

    Filesize

    300KB

  • memory/3076-136-0x0000000005250000-0x0000000005868000-memory.dmp

    Filesize

    6.1MB

  • memory/3076-137-0x0000000005870000-0x000000000597A000-memory.dmp

    Filesize

    1.0MB

  • memory/3076-138-0x0000000005990000-0x00000000059A2000-memory.dmp

    Filesize

    72KB

  • memory/3076-139-0x00000000059F0000-0x0000000005A2C000-memory.dmp

    Filesize

    240KB

  • memory/3076-140-0x00000000006B2000-0x00000000006E0000-memory.dmp

    Filesize

    184KB