Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
16/11/2023, 03:46
General
-
Target
ac3ebfc3f50e2fca46124d2657e6e8367df33976a34d451f6d5e5e435eabb142.exe
-
Size
3.4MB
-
MD5
d7e6971f6bc029c7c8a78dd97416f3ad
-
SHA1
5c3ff8ace6e702d9bd48d1b4aff3cc921a765fd4
-
SHA256
ac3ebfc3f50e2fca46124d2657e6e8367df33976a34d451f6d5e5e435eabb142
-
SHA512
0db1c3964171cd4ce0b42601957a97364c5e693e3296395d93804c860fdadf0af310b3f9489949f7fe2e7194611afbf2a72baa778c633969df98fdab38dcf64e
-
SSDEEP
98304:dmXzwHDntwFoOWqgqIkgsvPAv7/tqgVPGtEFVw:EX4wptLQvzZVGuVw
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac3ebfc3f50e2fca46124d2657e6e8367df33976a34d451f6d5e5e435eabb142.exe"C:\Users\Admin\AppData\Local\Temp\ac3ebfc3f50e2fca46124d2657e6e8367df33976a34d451f6d5e5e435eabb142.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5d7163a97045f4e76c957cb443fe6ea1c
SHA17be66305ec65fcdf26494ade6b6bf6fe96559031
SHA256de9f1c4c47dc1c1840a3252bbd80b814e40ee54c7968f8689af21ada9e341f52
SHA51226f42ae26f715bcbc3b58b9be5812c70fd829fd3500efc20ecc86e6489d27b25b2476b4faa0d9c3ceabcf148a2086e6a6538573af8c0a7e6a7e772b15c1be1e6
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB