Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
125s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
21/08/2023, 01:55
General
-
Target
cd302da7e6d70c6292aab530d5ea509fb06ddcecc00cc7e8db9030d4a41f4d1a.exe
-
Size
655KB
-
MD5
3b05b28e50e59bc98099fb9b59e931c6
-
SHA1
ff38bdb43c8b3bd2727fcea609b8d32ceb1316b9
-
SHA256
cd302da7e6d70c6292aab530d5ea509fb06ddcecc00cc7e8db9030d4a41f4d1a
-
SHA512
50329d88f9d8c595cbc963336ad0fa4619cf5092962df3b6b6fb73ac4be7fa0c8070bedb7259613f73cb4a77303a69a6fac1c7a5dcaa76ca162c0925fda951f9
-
SSDEEP
12288:9F700JD+IU4gY7kerA2tk1/+7guOp38fca+dfkKMXXVf8:H70RG7JrA7t+SKV0chHW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd302da7e6d70c6292aab530d5ea509fb06ddcecc00cc7e8db9030d4a41f4d1a.exe"C:\Users\Admin\AppData\Local\Temp\cd302da7e6d70c6292aab530d5ea509fb06ddcecc00cc7e8db9030d4a41f4d1a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 8842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2632 -ip 26321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
680KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
7.7MB