Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 07:13
General
-
Target
6906eb472325675485397d872487fb7c.exe
-
Size
101KB
-
MD5
6906eb472325675485397d872487fb7c
-
SHA1
706228d93e0db307e8b9145f201a337fc4bb0eb1
-
SHA256
5540a57265c97bcd9f2bf70b1c54005181bbf7b1349096af2842098ee0583762
-
SHA512
4bf9784317d9b748cb6a3ed17f27bc1d11a218210f1e4d5d858ef4cf58c896e25b1ea7c47d2af138856f901f463e7051235c264dc541c592fc5daad3f6dd25ef
-
SSDEEP
3072:hNUOWYz6Lf/UyPZ1vMTe4OBRy0m9+tweAV96:hFr6TUk+zsy+
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6906eb472325675485397d872487fb7c.exe"C:\Users\Admin\AppData\Local\Temp\6906eb472325675485397d872487fb7c.exe"1⤵
- Adds Run key to start application
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB