Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/08/2023, 00:45

General

  • Target

    file.exe

  • Size

    395KB

  • MD5

    6372c1ae4d621c6f721a22325ea0628b

  • SHA1

    c9a4ec83a3cfcd546ac1604a0d72e6eb4c466136

  • SHA256

    1e9d2dcc39b6db63b9d5ee2ffebd26347b3694f81d1258a5052b009eebd03251

  • SHA512

    795438ba92103bb16369b9f317a0e562a2723492644712aab2c877d7b956f16c07594fcdcdc8429236711469825d9d841aa1578337beb5e419cb6e94155d188c

  • SSDEEP

    6144:rhAb/4YLZDdwwvRto4VIpgr9F+mwvVuYzuIBvksFuHCv0/5ouDdGW:rhE/4YVd1KSIqtwd3iIIHCvw5ou5G

Score
7/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/632-133-0x0000000003620000-0x000000000365B000-memory.dmp

    Filesize

    236KB

  • memory/632-134-0x0000000003660000-0x00000000036AF000-memory.dmp

    Filesize

    316KB

  • memory/632-135-0x0000000000400000-0x00000000018E0000-memory.dmp

    Filesize

    20.9MB

  • memory/632-136-0x0000000074B50000-0x0000000075300000-memory.dmp

    Filesize

    7.7MB

  • memory/632-137-0x00000000061C0000-0x00000000061D0000-memory.dmp

    Filesize

    64KB

  • memory/632-138-0x00000000061C0000-0x00000000061D0000-memory.dmp

    Filesize

    64KB

  • memory/632-139-0x00000000061D0000-0x0000000006774000-memory.dmp

    Filesize

    5.6MB

  • memory/632-140-0x0000000008C00000-0x0000000008C92000-memory.dmp

    Filesize

    584KB

  • memory/632-141-0x0000000003620000-0x000000000365B000-memory.dmp

    Filesize

    236KB

  • memory/632-142-0x00000000061C0000-0x00000000061D0000-memory.dmp

    Filesize

    64KB

  • memory/632-143-0x00000000061A0000-0x00000000061AA000-memory.dmp

    Filesize

    40KB

  • memory/632-145-0x0000000009450000-0x0000000009462000-memory.dmp

    Filesize

    72KB

  • memory/632-144-0x0000000008E00000-0x0000000009418000-memory.dmp

    Filesize

    6.1MB

  • memory/632-146-0x0000000009470000-0x000000000957A000-memory.dmp

    Filesize

    1.0MB

  • memory/632-148-0x0000000009580000-0x00000000095BC000-memory.dmp

    Filesize

    240KB

  • memory/632-147-0x0000000000400000-0x00000000018E0000-memory.dmp

    Filesize

    20.9MB

  • memory/632-149-0x0000000003660000-0x00000000036AF000-memory.dmp

    Filesize

    316KB

  • memory/632-150-0x00000000097A0000-0x0000000009806000-memory.dmp

    Filesize

    408KB

  • memory/632-151-0x0000000074B50000-0x0000000075300000-memory.dmp

    Filesize

    7.7MB

  • memory/632-152-0x0000000009F40000-0x0000000009FB6000-memory.dmp

    Filesize

    472KB

  • memory/632-153-0x000000000A020000-0x000000000A1E2000-memory.dmp

    Filesize

    1.8MB

  • memory/632-154-0x000000000A200000-0x000000000A72C000-memory.dmp

    Filesize

    5.2MB

  • memory/632-155-0x000000000A830000-0x000000000A84E000-memory.dmp

    Filesize

    120KB

  • memory/632-156-0x00000000061C0000-0x00000000061D0000-memory.dmp

    Filesize

    64KB

  • memory/632-159-0x00000000061C0000-0x00000000061D0000-memory.dmp

    Filesize

    64KB