Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 23:22

General

  • Target

    ff2e122119a6d1a83e00b3a549e98d1de5eaf9e120f314fe112ec81f838d0dd7.exe

  • Size

    104KB

  • MD5

    d22524d87aa7c70e91c3fcc8710b2a85

  • SHA1

    98570ab9917639f71231ae2732000691f643b2bd

  • SHA256

    ff2e122119a6d1a83e00b3a549e98d1de5eaf9e120f314fe112ec81f838d0dd7

  • SHA512

    9491f6c92e3e0a5e23e4ad79cfa0c7ee11982fb5bbc0fb1940ff273ae1a32f22560f9ab0eea3df03a7f70dd130a7c7e7d4a01b26e1f2b297bbe3f8f1d63fe336

  • SSDEEP

    1536:hClUe3MN0YsIol+K13ZMg82YXF1bQg8QybZxEBW+xAc7xg:hCPl+Ksn2M6nQybsBS

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ff2e122119a6d1a83e00b3a549e98d1de5eaf9e120f314fe112ec81f838d0dd7.exe
    "C:\Users\Admin\AppData\Local\Temp\ff2e122119a6d1a83e00b3a549e98d1de5eaf9e120f314fe112ec81f838d0dd7.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2860-4-0x0000000003BD0000-0x0000000003BEA000-memory.dmp

    Filesize

    104KB

  • memory/2860-5-0x0000000073560000-0x0000000073D10000-memory.dmp

    Filesize

    7.7MB

  • memory/2860-7-0x0000000006260000-0x0000000006270000-memory.dmp

    Filesize

    64KB

  • memory/2860-6-0x0000000006260000-0x0000000006270000-memory.dmp

    Filesize

    64KB

  • memory/2860-8-0x0000000006820000-0x0000000006DC4000-memory.dmp

    Filesize

    5.6MB

  • memory/2860-9-0x0000000073560000-0x0000000073D10000-memory.dmp

    Filesize

    7.7MB

  • memory/2860-10-0x0000000077861000-0x0000000077862000-memory.dmp

    Filesize

    4KB

  • memory/2860-13-0x0000000006DD0000-0x0000000006E6C000-memory.dmp

    Filesize

    624KB

  • memory/2860-14-0x0000000006780000-0x00000000067E6000-memory.dmp

    Filesize

    408KB

  • memory/2860-15-0x0000000006260000-0x0000000006270000-memory.dmp

    Filesize

    64KB