Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/10/2023, 02:44

General

  • Target

    7f15c875b4b7eff91af21e454dbea053b33273d47a53685d9ab4cbc4829681b6.exe

  • Size

    1.4MB

  • MD5

    3e8f5009847efa008e79d845151ea5b4

  • SHA1

    4a918bad4e71533a0a0ce20d3ab71a6442cab520

  • SHA256

    7f15c875b4b7eff91af21e454dbea053b33273d47a53685d9ab4cbc4829681b6

  • SHA512

    824e09beaaec860b0a09a014074ab82192418249c1a2e8e61f65d1249238c3477ab08b0cab62eeb92c2e60d76cf8b77f8f3fbabd6d5d82eeb5c58178c744acb3

  • SSDEEP

    24576:rI5KG6AMyeIh9aeXoXo3exHEWRgI5W5gZG51lKmGSudQJjFG3:rkfXqxHE/KpZe+TSB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7f15c875b4b7eff91af21e454dbea053b33273d47a53685d9ab4cbc4829681b6.exe
    "C:\Users\Admin\AppData\Local\Temp\7f15c875b4b7eff91af21e454dbea053b33273d47a53685d9ab4cbc4829681b6.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:5112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5112-0-0x0000000000D90000-0x0000000000D91000-memory.dmp

    Filesize

    4KB

  • memory/5112-1-0x0000000000D90000-0x0000000000D91000-memory.dmp

    Filesize

    4KB

  • memory/5112-2-0x0000000000D90000-0x0000000000D91000-memory.dmp

    Filesize

    4KB