Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    262s
  • max time network
    265s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/06/2023, 20:08

General

  • Target

    boost-bo.exe

  • Size

    4.6MB

  • MD5

    cfd6e46ebad87e50cd5aa8d6b874d409

  • SHA1

    e2adb61cd2c84a6d00f6b646c0fc50d2065ef382

  • SHA256

    aa203ad2aac0bf8b392ec2add640ba020c2ed9938bea18dbf26631e9faa70f9d

  • SHA512

    679eb63a890cd85c24e94d96a1af7f6b125f0818eb1652626da7e99144e6378ee89f2949bc812c40b0761db84fb3f2b5a389ccad6cd192ff02a74d7e67d8ec1a

  • SSDEEP

    98304:z6+CSZXttEB+1r2oid4wr3v5wvVeqgkqXf0FGIrjMW94z9OUj:aSZnl1Coid4w34gkSIrYW94

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\boost-bo.exe
    "C:\Users\Admin\AppData\Local\Temp\boost-bo.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:5116

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5116-133-0x00000000002E0000-0x0000000000780000-memory.dmp

    Filesize

    4.6MB

  • memory/5116-134-0x0000000005740000-0x0000000005CE4000-memory.dmp

    Filesize

    5.6MB

  • memory/5116-135-0x0000000005190000-0x0000000005222000-memory.dmp

    Filesize

    584KB

  • memory/5116-136-0x00000000053A0000-0x00000000053AA000-memory.dmp

    Filesize

    40KB

  • memory/5116-137-0x0000000002B20000-0x0000000002B30000-memory.dmp

    Filesize

    64KB

  • memory/5116-138-0x00000000086D0000-0x00000000086E2000-memory.dmp

    Filesize

    72KB

  • memory/5116-141-0x0000000002B20000-0x0000000002B30000-memory.dmp

    Filesize

    64KB

  • memory/5116-142-0x0000000002B20000-0x0000000002B30000-memory.dmp

    Filesize

    64KB

  • memory/5116-143-0x0000000008C80000-0x0000000008CBC000-memory.dmp

    Filesize

    240KB

  • memory/5116-144-0x0000000002B20000-0x0000000002B30000-memory.dmp

    Filesize

    64KB

  • memory/5116-145-0x0000000002B20000-0x0000000002B30000-memory.dmp

    Filesize

    64KB

  • memory/5116-146-0x0000000002B20000-0x0000000002B30000-memory.dmp

    Filesize

    64KB