Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    19/11/2023, 15:57

General

  • Target

    48a3ec2463994c7eb039504a4e9adeb1a355d6a218317faf8e54b7f3e26ac0cc.exe

  • Size

    716KB

  • MD5

    55f5034e8c5953175ba71ba54b82f47e

  • SHA1

    49a53f2687a8b9b8a5440b62245f4a8f84b8bed4

  • SHA256

    48a3ec2463994c7eb039504a4e9adeb1a355d6a218317faf8e54b7f3e26ac0cc

  • SHA512

    2cea7f6761f2765949e2deabdd79781b2affc3e57f1b4ae8dd84c9e71b038b6d5e8cdde30045e7dffd87d6e258a34fc22ae7d62f1df5b3659919d9924926d48b

  • SSDEEP

    12288:qTP/aK2vB+u0DudXezE09Si/ckGHt6pshsPSGkYl2XIQCb+Lk1TWbPXQnAN5L:qLCKABIgXe4i7ojhsP5Lgrk1TWb4AN5

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\48a3ec2463994c7eb039504a4e9adeb1a355d6a218317faf8e54b7f3e26ac0cc.exe
    "C:\Users\Admin\AppData\Local\Temp\48a3ec2463994c7eb039504a4e9adeb1a355d6a218317faf8e54b7f3e26ac0cc.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1892-0-0x0000000000400000-0x00000000004B8000-memory.dmp

    Filesize

    736KB

  • memory/1892-1-0x00000000004C0000-0x0000000000527000-memory.dmp

    Filesize

    412KB

  • memory/1892-7-0x00000000004C0000-0x0000000000527000-memory.dmp

    Filesize

    412KB

  • memory/1892-6-0x00000000004C0000-0x0000000000527000-memory.dmp

    Filesize

    412KB

  • memory/1892-12-0x0000000000400000-0x00000000004B8000-memory.dmp

    Filesize

    736KB