Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
02/11/2023, 13:22
General
-
Target
NEAS.81c2f2ceb413a4e4f1cf21900ffe5830_JC.dll
-
Size
8KB
-
MD5
81c2f2ceb413a4e4f1cf21900ffe5830
-
SHA1
93ff46562d754595da0f154f840365aa8261072c
-
SHA256
5ec1e4be92602de0516919094d33944296670f7f16bb1479de2bae6931ab3fff
-
SHA512
58192807332e38e2a9566f6319e0bea5b5c70865fc5b2f75e7d71d12f6f8c8a3f4d148d38bc4b36c51f25558fa153d4462cb78d2330c95e09c107f27a5efe9eb
-
SSDEEP
96:VFpfYqLY3lwU8mvkBal8wgjkgSOF5WPlGnjWjo3wdK5UV7RbnTTEGQte4Q+:zpwqLY3lX4W8wDgSOFnmk0EUVdnF
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.81c2f2ceb413a4e4f1cf21900ffe5830_JC.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB