Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
245s -
max time network
388s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
07/11/2023, 14:03
General
-
Target
Kelmis.exe
-
Size
638KB
-
MD5
d2d745b3210a17d3d50518e2c957a92d
-
SHA1
07b66db19739e0673337db1b2c9edd2d78183e5e
-
SHA256
133cc7cb530ff443b9299c2ece88b29ccdb79e8c00e66c063a344692eb00299a
-
SHA512
00bd5b86ce5503557f768c5f900820f35e7cf780be46503c2e6a3a82b522781fe435d62842484e9905b9c3dac381725701e7f4bd218481a60b666f3b4dc8209b
-
SSDEEP
1536:yC79gXAX271lcBzqEY2lkCswVxYDXosWkd09dlTaUGX5unVvX+9BRghXa9GGGGGl:XgXpJozm2lkCsuYDbMtZfVW9nWa29
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Kelmis.exe"C:\Users\Admin\AppData\Local\Temp\Kelmis.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f8 0x5001⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB