Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20231020-en -
resource tags
-
submitted
26/10/2023, 08:06
General
-
Target
48E003A01.exe
-
Size
211KB
-
MD5
74c1127dcf701bfde53f4c92f9c8dbba
-
SHA1
1b9fe118a47f905bc26d952f55e543ed6e35648c
-
SHA256
3fb66e93d12abd992e94244ac7464474d0ff9156811a76a29a76dec0aa910f82
-
SHA512
4f4a3477cc7e6ac1ea965e921b1a9f0950754e708daace8baaeec87af37efe4dd1bf0679bffa2be63b0b4b94bb4d992191afe8c4c922ee57f3070fbe1ebbead2
-
SSDEEP
3072:DVwxiCLyrgkY1R4VC8/NLEaC5zC5yh5GvyzDF8HWhvYIMaNOwzf6fNlGH1KPEay0:D6xiCGrgkY1d5mwiHaYjaNp4Nu1o
Score
10/10
Malware Config
Extracted
Family
customerloader
C2
http://5.42.94.169/customer/735
Signatures
-
Customer Loader
Customer Loader is a downloader written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\48E003A01.exe"C:\Users\Admin\AppData\Local\Temp\48E003A01.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
224KB
-
Filesize
9.9MB
-
Filesize
5.1MB
-
Filesize
64KB
-
Filesize
9.9MB
-
Filesize
64KB