Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20230824-en
  • resource tags

    arch:x64arch:x86image:win7-20230824-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2023, 13:23 UTC

General

  • Target

    24020238 RVOOIN-16-0077.exe

  • Size

    221KB

  • MD5

    1b609ec45815de8ae1b665dfa9f374d8

  • SHA1

    086ad42a52b239902e0205d8399a3265dacdc970

  • SHA256

    e1d5abc7c22da2d3def88a5118efc2f1c6349549654dec4d65ad477218244420

  • SHA512

    d0480f7162e8293b355e8c0a08bddf8bc3a040677bb3546639f69f4d86eeee09fce767738d281ea0acf1e8ed058771e0090db03411c3041b7b567996f77547f9

  • SSDEEP

    6144:BmANehKKjF+cuM/GM8I0nbu7hWEECv4r+ViK:BmANehKo+cuM/GMsnbuoEECv8

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\24020238 RVOOIN-16-0077.exe
    "C:\Users\Admin\AppData\Local\Temp\24020238 RVOOIN-16-0077.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:940

Network

  • flag-us
    DNS
    files.catbox.moe
    24020238 RVOOIN-16-0077.exe
    Remote address:
    8.8.8.8:53
    Request
    files.catbox.moe
    IN A
    Response
    files.catbox.moe
    IN A
    108.181.20.35
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    450 B
    215 B
    7
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    24020238 RVOOIN-16-0077.exe
    304 B
    6
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    211 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    350 B
    219 B
    5
    5
  • 108.181.20.35:443
    files.catbox.moe
    tls
    24020238 RVOOIN-16-0077.exe
    258 B
    52 B
    3
    1
  • 108.181.20.35:443
    24020238 RVOOIN-16-0077.exe
  • 8.8.8.8:53
    files.catbox.moe
    dns
    24020238 RVOOIN-16-0077.exe
    62 B
    78 B
    1
    1

    DNS Request

    files.catbox.moe

    DNS Response

    108.181.20.35

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/940-0-0x00000000744F0000-0x0000000074BDE000-memory.dmp

    Filesize

    6.9MB

  • memory/940-1-0x0000000000DB0000-0x0000000000DEE000-memory.dmp

    Filesize

    248KB

  • memory/940-2-0x00000000004F0000-0x0000000000530000-memory.dmp

    Filesize

    256KB

  • memory/940-3-0x00000000744F0000-0x0000000074BDE000-memory.dmp

    Filesize

    6.9MB

  • memory/940-4-0x00000000004F0000-0x0000000000530000-memory.dmp

    Filesize

    256KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.