Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
-
submitted
01/11/2023, 13:09
General
-
Target
Shipping Documents 80053164992.exe
-
Size
953KB
-
MD5
118090ee776424c6ff08ec26a98cb134
-
SHA1
c76d5ace2a5c080c20dc43122f636088af8eaba1
-
SHA256
f2ef4aecdf3304be6f7f7b729eea019ae8af63befc4c0736e71c722c169e3eab
-
SHA512
df561a729b5cbbc383ebc653f217721ac514df21be81eae139e4b32ef5832132c62b343efa37fe08dc68ad8d81cd81564d29e4cbc0315e14109200bf13bff93c
-
SSDEEP
24576:T5EACio/gqFU/OOq7r0iMGXwkvW8/ZozW+Q:g/4/tqD1gIWOZoa+
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Shipping Documents 80053164992.exe"C:\Users\Admin\AppData\Local\Temp\Shipping Documents 80053164992.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Shipping Documents 80053164992.exe"C:\Users\Admin\AppData\Local\Temp\Shipping Documents 80053164992.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
976KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
624KB
-
Filesize
720KB
-
Filesize
104KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
64KB