Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
19/09/2023, 01:24
General
-
Target
091606938bb0faa76ff3e8ba1bcf49df9972a139e3000ea8bbf93d6ab7e8ee88.exe
-
Size
2.9MB
-
MD5
a5e576dfee473ae05f6aded155b7d7d0
-
SHA1
ec0f408d3578e6f1609ae66142d54eb8bd641d24
-
SHA256
091606938bb0faa76ff3e8ba1bcf49df9972a139e3000ea8bbf93d6ab7e8ee88
-
SHA512
45c4b6f1bc6f2f60d66ff6dc017ec13732934254880b4a7f2f6c9d612eb6fceeca77fcf1120a02c0ea683986a928215cae507fd88a4a2c1c840bbf0a4db665b2
-
SSDEEP
49152:T0CJDIYMJM6pA8kkzF7gx/3Sxo1z0ZMD7naZkz:T10YMJM6pA1khxMNDza2
Malware Config
Signatures
-
Sets service image path in registry 2 TTPs 3 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: LoadsDriver 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\091606938bb0faa76ff3e8ba1bcf49df9972a139e3000ea8bbf93d6ab7e8ee88.exe"C:\Users\Admin\AppData\Local\Temp\091606938bb0faa76ff3e8ba1bcf49df9972a139e3000ea8bbf93d6ab7e8ee88.exe"1⤵
- Sets service image path in registry
- Loads dropped DLL
- Suspicious behavior: LoadsDriver
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
601KB
MD5437aa5dd7eb0ff647f033dcdaddc0fb6
SHA18b71c116cb1e797f44ce78553f5f62c3011f6661
SHA256ca1522bc10c78f7ca00c1fc8e2f21ed6b33ebf1de2b0726112c406ac467ef60c
SHA51299d1b699aa6bd41393c291808135858455e929c9cfecadbce4bbe98abccffd04a09078ca718ef892f14bab22b06555eef3bddc73dc5b6e6c077155b963a65e3f
-
Filesize
616KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
616KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB