Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
198s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 02:28
Static task
static1
Behavioral task
behavioral1
Sample
MicrotrendAudio.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
MicrotrendAudio.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
b5tnf9h4zy.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
b5tnf9h4zy.dll
Resource
win10v2004-20230915-en
General
-
Target
MicrotrendAudio.exe
-
Size
776KB
-
MD5
48612907f00b6913bce7a837a127eb8f
-
SHA1
66cfb3252c6455f5c53f5468c6e8e1b366e6727f
-
SHA256
e0949645223fac30995ecada85a9ad49fef4c57881652a9d7b1e14d974992431
-
SHA512
e07c93980f66cfb66040fec566d4a4bf893e11297886e1cc4eed2f4e5d07cf1c6c042939ca38d2ff83cfb479c32c52ae0c4f594ef2e3a67b4493235f3a7ab197
-
SSDEEP
24576:zjFPcsRZviJwTSRzdfgSLbirY1cO3EwNTVnW/k2:KJwmpfgONT2k2
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 42 IoCs
pid Process 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe 4052 MicrotrendAudio.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4052 MicrotrendAudio.exe