Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2023, 15:29

General

  • Target

    2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10.exe

  • Size

    7.9MB

  • MD5

    edb25acfde2a776df40f8edd9b17d00d

  • SHA1

    e5431241a0aaa6b3ff2a29a4e490e1a897fd3cb9

  • SHA256

    2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10

  • SHA512

    7545a961d579743ee4186cab64c0ecbc310c674eacc67e6a129a8b870d8852319b0ae8a38a076b63f84e03c5e3f2e513710827465510adf7228adb63e0c6f000

  • SSDEEP

    196608:zj1b8aPXCFLOyomFHKnPhVYQ37Sdd9iD+nt3Pq+kcF0SfSd9g:96FQVYwK9QORy+7Nqd

Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10.exe
    "C:\Users\Admin\AppData\Local\Temp\2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\evbCC0B.tmp

    Filesize

    1KB

    MD5

    5ef7b40384b495f48e8043be144d5d20

    SHA1

    29404695c5ada4d0d6dea0bdec5c8f1b35762183

    SHA256

    50fa4179b15e31b5777fdba8b98eb3cc3fcb66363e6b5e289cee2415377039b2

    SHA512

    2b7d0bbcc1db802761abcd5c55c940b4e66dd78f2cf1dd27039105155439ddfc595808ac33e1075be65d8c425e9d26554c8bd0f2719398988009f2f1daa8a251

  • memory/2040-20-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-57-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-1-0x0000000077D32000-0x0000000077D33000-memory.dmp

    Filesize

    4KB

  • memory/2040-7-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-11-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-12-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-13-0x0000000003600000-0x0000000003E1B000-memory.dmp

    Filesize

    8.1MB

  • memory/2040-14-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-15-0x0000000003E20000-0x000000000471A000-memory.dmp

    Filesize

    9.0MB

  • memory/2040-16-0x0000000002C10000-0x0000000002C12000-memory.dmp

    Filesize

    8KB

  • memory/2040-17-0x0000000002BF0000-0x0000000002C07000-memory.dmp

    Filesize

    92KB

  • memory/2040-27-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-2-0x0000000077D33000-0x0000000077D34000-memory.dmp

    Filesize

    4KB

  • memory/2040-19-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-18-0x0000000003420000-0x0000000003421000-memory.dmp

    Filesize

    4KB

  • memory/2040-28-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-29-0x0000000003600000-0x0000000003E1B000-memory.dmp

    Filesize

    8.1MB

  • memory/2040-31-0x0000000003E20000-0x000000000471A000-memory.dmp

    Filesize

    9.0MB

  • memory/2040-32-0x0000000002C10000-0x0000000002C12000-memory.dmp

    Filesize

    8KB

  • memory/2040-33-0x0000000002BF0000-0x0000000002C07000-memory.dmp

    Filesize

    92KB

  • memory/2040-34-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-38-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-39-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB

  • memory/2040-42-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-0-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-58-0x0000000000400000-0x00000000007E1000-memory.dmp

    Filesize

    3.9MB

  • memory/2040-59-0x0000000010000000-0x00000000105E6000-memory.dmp

    Filesize

    5.9MB