Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1600s
  • max time network
    1603s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    24/04/2023, 13:08

General

  • Target

    Evon/Evon.exe

  • Size

    6.4MB

  • MD5

    8a3a3c1c0ff62fab204c8e6e76e477a7

  • SHA1

    50fde23d977cc384eec65b4dc20e6c76749a1208

  • SHA256

    b5d324e31f58cb59eaeecbbb4f743ca474f7acefd1326ded5ae2c77866f55238

  • SHA512

    20705142e476d7ee1f3d6133020a74b42fcb12c1513b4d4ef28ca254226802a6926b90dcf18f673af47b964ceca7a26674307ecf5500b4e41a7a047a31718169

  • SSDEEP

    98304:6FmsG+4eOpS9qWNXNgCp6aGBwHCcmmxVA5/xDnLx0yu+5TpUz:yDGw9f92CnPhATd0yHg

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Evon\Evon.exe
    "C:\Users\Admin\AppData\Local\Temp\Evon\Evon.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1920-54-0x0000000000EE0000-0x0000000001544000-memory.dmp

    Filesize

    6.4MB

  • memory/1920-55-0x00000000076A0000-0x0000000007F06000-memory.dmp

    Filesize

    8.4MB

  • memory/1920-56-0x0000000004E80000-0x0000000004EC0000-memory.dmp

    Filesize

    256KB

  • memory/1920-57-0x0000000000510000-0x000000000051E000-memory.dmp

    Filesize

    56KB

  • memory/1920-58-0x0000000000630000-0x00000000006E0000-memory.dmp

    Filesize

    704KB

  • memory/1920-59-0x0000000007F10000-0x000000000804E000-memory.dmp

    Filesize

    1.2MB

  • memory/1920-60-0x0000000000D30000-0x0000000000D3A000-memory.dmp

    Filesize

    40KB

  • memory/1920-61-0x0000000004DC0000-0x0000000004E06000-memory.dmp

    Filesize

    280KB

  • memory/1920-63-0x0000000000EC0000-0x0000000000EE6000-memory.dmp

    Filesize

    152KB

  • memory/1920-64-0x0000000004E10000-0x0000000004E38000-memory.dmp

    Filesize

    160KB

  • memory/1920-67-0x0000000000EB0000-0x0000000000EBA000-memory.dmp

    Filesize

    40KB

  • memory/1920-69-0x0000000004E80000-0x0000000004EC0000-memory.dmp

    Filesize

    256KB

  • memory/1920-70-0x0000000000EB0000-0x0000000000EBA000-memory.dmp

    Filesize

    40KB

  • memory/1920-71-0x0000000000EB0000-0x0000000000EBA000-memory.dmp

    Filesize

    40KB