Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
07/10/2023, 12:24
General
-
Target
446785acd40da1ce9d8a65866c33558367f565a60bc99d1289f48f7947d2dd9a.exe
-
Size
1.4MB
-
MD5
98a6c4e1066c11a81d132dda967a71ba
-
SHA1
cb66e5d628590b3d6a11c27758a07abff4ce9103
-
SHA256
446785acd40da1ce9d8a65866c33558367f565a60bc99d1289f48f7947d2dd9a
-
SHA512
a9207d14a392a22f585fb130aaf3ec258f47ab4c5e8d14a02134921964e007c84eee2c4041382dfeed7e130ab1f0ce20be4d57d4199607afa54f9cb5259c59de
-
SSDEEP
12288:07gKNkhm/JuyXnPB+h8WHUXI7vgbrWVQhTCYHvRktx/aICF9flefuKaO0VQ/:07zNkhm5PBXE743TvRk6NwG
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 4 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\446785acd40da1ce9d8a65866c33558367f565a60bc99d1289f48f7947d2dd9a.exe"C:\Users\Admin\AppData\Local\Temp\446785acd40da1ce9d8a65866c33558367f565a60bc99d1289f48f7947d2dd9a.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD512da10760a2751127d9520002ba32c23
SHA18889688c7ced4aed77c6fe32a1f0c7ff78ae0b39
SHA2561bec5f880517f3dd5eb262e0c8ac071906138fed68467957084c3f82782d0513
SHA512f15e20ff1455393d3c3d0328a1146f5e4e21f4a3d8e1b20289c045435e91907e37b74a346dc536546a4b3612c049ae25004e67d02b0830afb36230019ef7aee3
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB