Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
31/10/2023, 19:28
General
-
Target
Fluster.Installer.exe
-
Size
20KB
-
MD5
efa51e048948bf4d35a671d5e70d966d
-
SHA1
a34040e4f8600b2bf5da78c352827fa884ac4a66
-
SHA256
93418ec61e1f96a46e9f64b3858e3c8dd4f0530083d6eace8d691ef319d4535f
-
SHA512
1b3536ca4df42ef23e04276db52f0e46e68b189c45ac9b5e00fb16996e3a720eb0d4ebd93b8a434c518c8189c93fe47f263b914d4021c5893f0361e2afa18d9d
-
SSDEEP
384:vp01C2uxtRmV6d1Fd7irBYYgeaaQMgR7U3m8J:RfRs61F4uY3aaQMgR7U3m8J
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fluster.Installer.exe"C:\Users\Admin\AppData\Local\Temp\Fluster.Installer.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c pause2⤵
-
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD50a9cfc392839bb6d9b3e5aec8faca439
SHA1c164d22e6fbb4a14e95ac626c45217061f953d89
SHA25619d9a7d2a01d221fc837ab4e51ce2000a11ed14cc738f5850a91ea302cf84401
SHA512df18b7eb22453fe7058a810f601c686132074b4c3c96cc1773f9e112c0acda17679665e831a7fe6ebf0728136af090817a2145681ebf3983d0688e36cac4609b
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB