Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/03/2023, 03:03

General

  • Target

    6643176655f6e1dd356f5b827bc80ad2de499434717c8d78dd36a2110fed5657.exe

  • Size

    1.8MB

  • MD5

    15235cb2697dd290c1976dd31f10fc44

  • SHA1

    00dc8836fd8b9fbab69419c19c2bcf998224cbf0

  • SHA256

    6643176655f6e1dd356f5b827bc80ad2de499434717c8d78dd36a2110fed5657

  • SHA512

    6df6f823d9efcfb5ee06218c75d096231789a063e331368cedf865fe9e8fd5f89e9518b23820f2e99662dd0e094e7d75111297b9bb47e3e53f3f1a56303bcc5b

  • SSDEEP

    49152:LXJMezxMw6mUvPJCgbffRdvYMFE64Nx7mQfUsc:lMezxWrNbnRdwgE6ohmQf5c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6643176655f6e1dd356f5b827bc80ad2de499434717c8d78dd36a2110fed5657.exe
    "C:\Users\Admin\AppData\Local\Temp\6643176655f6e1dd356f5b827bc80ad2de499434717c8d78dd36a2110fed5657.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4160-134-0x000000000F240000-0x000000000FABF000-memory.dmp

    Filesize

    8.5MB

  • memory/4160-135-0x000000000F300000-0x000000000F38D000-memory.dmp

    Filesize

    564KB

  • memory/4160-136-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-137-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-139-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-141-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-143-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-145-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-147-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-149-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-151-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-153-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-155-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-157-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-159-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-161-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-163-0x0000000003B90000-0x0000000003BA0000-memory.dmp

    Filesize

    64KB

  • memory/4160-164-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-165-0x0000000003B90000-0x0000000003BA0000-memory.dmp

    Filesize

    64KB

  • memory/4160-168-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-169-0x0000000003B90000-0x0000000003BA0000-memory.dmp

    Filesize

    64KB

  • memory/4160-171-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-173-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-175-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-167-0x0000000003B90000-0x0000000003BA0000-memory.dmp

    Filesize

    64KB

  • memory/4160-177-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-179-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-181-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-183-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-185-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-187-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-189-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-191-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-193-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-195-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-197-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-199-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-201-0x0000000003BB0000-0x0000000003C5D000-memory.dmp

    Filesize

    692KB

  • memory/4160-1042-0x0000000004050000-0x00000000040B6000-memory.dmp

    Filesize

    408KB