Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
115s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13/10/2023, 02:46
General
-
Target
App/DirectoryMonitor/DirectoryMonitorService.exe
-
Size
440KB
-
MD5
18680a1d6e673eaca6386aac9aa13210
-
SHA1
6470a1960e18a5e8d8ad0398572cdcee5aa80fe4
-
SHA256
dbf3d5b2911b66408c5f7ce70fe4fcbee723bff6db8df26fb298c6899e5cc3c1
-
SHA512
905b05f0719f0e297b65c0a778cb46674766909c0905129aec1768e281d8604bc4384477ecac6f816009cc63432a834f443eb6639db480b638e728a758c4d55f
-
SSDEEP
1536:TMaWZTIbCqXIOkJMIeWGOQQFBlWxpjKWzfnftgIB755HTRW38uy:YaWZTaCqXZkJMIeWSbjBHtgIBbHTwMp
Score
6/10
Malware Config
Signatures
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\App\DirectoryMonitor\DirectoryMonitorService.exe"C:\Users\Admin\AppData\Local\Temp\App\DirectoryMonitor\DirectoryMonitorService.exe"1⤵
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\auditpol.exe"auditpol.exe" /get /subcategory:"{0CCE921D-69AE-11D9-BED3-505054503030}"2⤵
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\SYSTEM32\auditpol.exe"auditpol.exe" /set /subcategory:"{0CCE921D-69AE-11D9-BED3-505054503030}" /success:disable2⤵
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\SYSTEM32\auditpol.exe"auditpol.exe" /get /subcategory:"{0CCE9223-69AE-11D9-BED3-505054503030}"2⤵
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Windows\SYSTEM32\auditpol.exe"auditpol.exe" /set /subcategory:"{0CCE9223-69AE-11D9-BED3-505054503030}" /success:disable2⤵
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
464KB
-
Filesize
304KB
-
Filesize
440KB
-
Filesize
10.8MB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
144KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
872KB
-
Filesize
384KB
-
Filesize
296KB
-
Filesize
152KB
-
Filesize
232KB
-
Filesize
80KB
-
Filesize
384KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
128KB
-
Filesize
224KB
-
Filesize
96KB
-
Filesize
112KB
-
Filesize
120KB
-
Filesize
96KB
-
Filesize
80KB
-
Filesize
104KB
-
Filesize
136KB
-
Filesize
88KB
-
Filesize
240KB
-
Filesize
72KB
-
Filesize
384KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB