Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
20/08/2023, 18:50
Behavioral task
behavioral1
Sample
bOYE.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bOYE.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
bOYE.exe
-
Size
32KB
-
MD5
0da65fe271feb2429b80663aea32cdca
-
SHA1
cc6c9eba4dbdbf97a6176f58fec5bde1d80a7e90
-
SHA256
ba4e87b503573bc23a39337de023711bf0346da26f64d1df83341414632cc07b
-
SHA512
e60c4bec29432e108cc02d18473e70fb99b66e1d2e7fb4d6262d573160185b24d795d49918edd1e3115c8a63240e6cf30746c44499d7d389bc560230adb26114
-
SSDEEP
384:h0bUe5XB4e0XOOZ9Qq1pvmufCsIsxWTVtTUFQqz9qObbx:6T9BuN/Qqvvmu6Fgbx
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe Token: 33 1380 bOYE.exe Token: SeIncBasePriorityPrivilege 1380 bOYE.exe