Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
14/11/2023, 15:56
General
-
Target
d61d142fb6ed3786f0236997534649b9227d447cb31e708c169ec4098039f861.exe
-
Size
6.2MB
-
MD5
87a6819a949ba1bbb1bf3c1e865e97d4
-
SHA1
513a2c29db35850185eb2012ba2a4f7f044f7805
-
SHA256
d61d142fb6ed3786f0236997534649b9227d447cb31e708c169ec4098039f861
-
SHA512
a5bba17fbd8c8cd81b50c8ec53ab194d3f1bdf03faa33e0dd04180f0c22ce0a6019cb3b289db4effccab7bc36698ddfa43cfc8815cecbf466cdfb0c3939d86a7
-
SSDEEP
98304:irS2H6ei5nczn0fCmXyHd7S8mUQgPg9jPKdzOJDb4v+:/Yz0auCS8mUQgP1wN0v+
Malware Config
Signatures
-
Downloads MZ/PE file
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d61d142fb6ed3786f0236997534649b9227d447cb31e708c169ec4098039f861.exe"C:\Users\Admin\AppData\Local\Temp\d61d142fb6ed3786f0236997534649b9227d447cb31e708c169ec4098039f861.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD599c7fe68689c9afd853faabb03dcc7a4
SHA1e940b54fb0e0bc2bad60664fbabe17dd6c5a52ff
SHA256eeba53afacfa03b60ca2a1dd4d28efca3f86752447487cea1517e8e4701e92c5
SHA512c6b6fe97140d834e60fbf7f88d4caa2c64a87025b981cf818d1991977969fbd6e7865319bf62de00d779b74747e115dd65abf03553f1dfc76984f17c429908fa
-
Filesize
2KB
MD5f3bea54228fb881b570a8c3b3997673b
SHA15d49f1c2f9f9b30053661a1ace8384ce8b429525
SHA256001a983a1a37e0fa68f1bd188fcf0b40ed5e5e14011f38da12b847ec18314ce7
SHA5120f5a6f40f5728c0baa939078cee564d397b63f5f9356ac38582535a4ac3f274cfa95e4721812a2e810a7fb48be7290d8ab40436afa41035396d29879c7fd0a4a
-
Filesize
5KB
MD52b65a2ca65ed0a1416faaa747e1b3620
SHA1d2d0f56f1ad5b3e59d068c2340e8f05d2a6fa3fa
SHA2567eb618a2312b22c8f1151fa786ed7e6be312f25401172f7175bb549cfc576c77
SHA5129e6b0df8392a9ebbe9131f8ddcc9082006c78a202f66c5239601a1029b0add46d89f37d55d191b83afc07fe2002f86ad3a718377b18d06e6ee53c86d66abeb94
-
Filesize
38B
MD58b8822c4c91ce75fabc3dc4ef23dfa92
SHA1da8ce12386a1b6de7a2341388e4b2cd4a6eb903f
SHA256bf2523c9ba871e45c4385ad0d73282bfacc6df889b9bde6bd21f26423a637410
SHA512bbd3f131418b5ea840cb8914c39379bb9f7f6a3167941b488bef556c09c7cdc93daa7b07d6f545d2c181b967cc07f8cf372dd608a2df9e62f8874b1c01e2194b
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB