Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
02/10/2023, 22:34
General
-
Target
7a8b06c76c5616fac1e627f10ba3772626e1b0e3.png
-
Size
2KB
-
MD5
823ef89e4c0b49148c2c5631a3892537
-
SHA1
7213c70d21a50017f2ef97d3619339b818f7b0b3
-
SHA256
6a10ca383b65ec986e0790e36707f60dabab88dab4b7c66e9650973ce87e9d25
-
SHA512
86a31e3f77449151051257b3f2c5f3c95ecd31887924b1c364bc4d47f3a657c583ec28556ca1948225a281c3fb2416cb5ff2b0838ffaa273ca6af54febb99f00
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\7a8b06c76c5616fac1e627f10ba3772626e1b0e3.png1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD59721fd4c407865830d9ab816be3c9c9e
SHA18f9d844c7be2ded38bf2ee8a71054b33a27234ae
SHA256b27c0604ea08a4638c62604703055d81b62451aa98361b56b6e24bd16cab1fc2
SHA512552fb62524429171d5caef2208b619b62b68c91773e3676d80bf7b0efa7b980bde2fce30bc19a3ecbd14fe2e2eaf5d74e795482552e93f11b41c5b61aad44b83
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB