Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
17/09/2023, 15:18
General
-
Target
f310b7abfcf993cf636a24584da0c563edce464244005a12d1b10abed7a59804.exe
-
Size
11.4MB
-
MD5
d24cc0d273f07f2e8393105b9998b0fb
-
SHA1
c44435f908c8aec6da1ea1c20241ff277f46a45c
-
SHA256
f310b7abfcf993cf636a24584da0c563edce464244005a12d1b10abed7a59804
-
SHA512
2518bb329da180b4da86cb6927620327bad10be28d8373a752cbef771a54dbfe21d8ea70aeed572d3a6e4426425f5669c25d35d4762dfc5e1f0f0e5ea5a0ebcf
-
SSDEEP
196608:C1awQvDPC7P1phWyzGylFQwepTeD7jYsJglDqqK1mHb9vd9xWslUKKSNe2bW2:C4RuT1/WSzspTev0Cb1mHbVw2
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f310b7abfcf993cf636a24584da0c563edce464244005a12d1b10abed7a59804.exe"C:\Users\Admin\AppData\Local\Temp\f310b7abfcf993cf636a24584da0c563edce464244005a12d1b10abed7a59804.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31.3MB
-
Filesize
31.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
31.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
31.3MB
-
Filesize
31.3MB
-
Filesize
31.3MB