Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
11/11/2023, 21:17
General
-
Target
my eyes deceive.exe
-
Size
638KB
-
MD5
1b01ea7559e6f14d648d608b37d3d642
-
SHA1
314e89b96e6daa888cd8ac741618455972276984
-
SHA256
a7577a518470d90bdb9399b579c1f32ad8cd9c7695dcb39292944da2f6e453b3
-
SHA512
94592b16834289129ae8c3465f8108a9cc6a9dff6f0e1b3584969b19e071502757540d770f5372f8d3ac47bdf34ddd68c92ff009c7bcc054dd781577722a5837
-
SSDEEP
3072:jgXpJozm2lkCspYDbM1qdK7yB4mq2hDvwuxfvkFhPj7TsSGXJyEOsSAgXwUg9wvT:apC62lkCToWB4mLqgSGsExivUL1ivMA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\my eyes deceive.exe"C:\Users\Admin\AppData\Local\Temp\my eyes deceive.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 4456 27133229178882⤵
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3fc 0x3f41⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB