Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22/10/2023, 17:31 UTC

General

  • Target

    NEAS.e6c85375cfca243daf60329f8f5ad540.exe

  • Size

    3.3MB

  • MD5

    e6c85375cfca243daf60329f8f5ad540

  • SHA1

    03746f4baef7ef13d187ae26c0d95e0a33d55c13

  • SHA256

    076a59ca31ae098c55d90adaef0bdc48b8d8461c880b33c9857bd75996085c70

  • SHA512

    59bc632131396b8090a65a22cf6a554dc953a1ba49006ce3545c1fa6598616f6f466497cc7b50f1882967817312284b23ed7a14405d61a7c8832c8c536fa79ff

  • SSDEEP

    49152:aKFBY+LoY2G/uW16js/+EoETONa4O8b8ITDnl/hFx+IaB0zj0yjoB2:aoY+LoYLVWE+EoEvB2Yyjl

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.e6c85375cfca243daf60329f8f5ad540.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.e6c85375cfca243daf60329f8f5ad540.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/296-0-0x0000000000400000-0x0000000000751000-memory.dmp

    Filesize

    3.3MB

  • memory/296-1-0x0000000001F90000-0x0000000001FF7000-memory.dmp

    Filesize

    412KB

  • memory/296-7-0x0000000001F90000-0x0000000001FF7000-memory.dmp

    Filesize

    412KB

  • memory/296-12-0x0000000000400000-0x0000000000751000-memory.dmp

    Filesize

    3.3MB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.