Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1591s -
max time network
1138s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
12/11/2023, 02:31
General
-
Target
selfbot/Crypto/Protocol/_scrypt.dll
-
Size
12KB
-
MD5
6229a84562a9b1fbb0c3cf891813aadd
-
SHA1
4fafb8af76a7f858418aa18b812feacadfa87b45
-
SHA256
149027958a821cbc2f0ec8a0384d56908761cc544914ced491989b2ad9d5a4dc
-
SHA512
599c33f81b77d094e97944bb0a93da68d2ccb31e6871ce5679179fb6b9b2ce36a9f838617ac7308f131f8424559c5d1a44631e75d0847f3cc63ab7bb57fe1871
-
SSDEEP
192:YTIekCffqPSTMeAk4OeR64ADpki6RcqgO5vE:YTNZMcPeR64ADh63gO5vE
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\selfbot\Crypto\Protocol\_scrypt.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5559b294d4795557a3cf17287eed6445f
SHA10b2f9444744c5edcddceb2c8e2b0c529889baa3e
SHA25601d5d17ee81fbc221fabbbc6f405507dd9eb176bb1642f7cf0135a92aca9aa41
SHA5124b56c4bbf8247fdfde5ef6b558bc79cf26de5d11025394671f1ac0c8766c9b04bddc2c2f74e9e8431d8f66d01b590514e5c62b0283308219c1105eb6462ceedb
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB