Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
123s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
12/04/2023, 06:31
General
-
Target
plugx/9aff1e12a1b447ca8ab3076f684716a859c906f9b2d0e870d59d0f06fc548d0d.exe
-
Size
201KB
-
MD5
9c616ead0699110365ca354bd5f828af
-
SHA1
e0ec398d6ef3cbede98c6b9741a20db5c1358332
-
SHA256
9aff1e12a1b447ca8ab3076f684716a859c906f9b2d0e870d59d0f06fc548d0d
-
SHA512
8de44dc9b05203f546c1447e610f5502b3e7f550f92606b3d8fe1d4ae875d67c78b0c1267e4a6d0560b26074d25c85376163db8743156785f0bf0372e750534d
-
SSDEEP
6144:HGjE0F/c4P+6l/0MY1CDXuoFE9lwj4Ejd7PWn:HoE0F/c4PN0+DXKgj4EZ8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\plugx\9aff1e12a1b447ca8ab3076f684716a859c906f9b2d0e870d59d0f06fc548d0d.exe"C:\Users\Admin\AppData\Local\Temp\plugx\9aff1e12a1b447ca8ab3076f684716a859c906f9b2d0e870d59d0f06fc548d0d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken