Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1705s -
max time network
1162s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
20/11/2023, 17:52
General
-
Target
GameJamProjesi_Data/Managed/Boxophobic.Utils.Scripts.dll
-
Size
9KB
-
MD5
e74bd0de92290bbab8715e260c2bff86
-
SHA1
0721ff59d1e43936e06cff7d49054c133a0361da
-
SHA256
84550c8ebcca6f4271ca0b7a9b47dd54fe70804566a6d66a33351b18ee4e8e7e
-
SHA512
6ec609beab62c486b3c76e1737cd56af1711e5ebdd0f6e4749b04dc9cf2822084aa0cf357b51513bfbe47d01fa8cb9f6e928c935352d7ce211f01fe9f5bf1cd5
-
SSDEEP
192:fQt8fifhJ7rVGjSwRbvz4kv3QuyYLXfh4zEpsE8GuVKS4sQ9:+7JPwzLyGXfhJmE8GuVKS4sQ9
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\GameJamProjesi_Data\Managed\Boxophobic.Utils.Scripts.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5e31e73752559cc9bd2a7485c3fc44191
SHA112f5a6b921e013eee3095b2944f2c72b91052187
SHA256e2d0aad9c881ac59215c540ff52df8864c24da631747a1e195b3e8463cc05cba
SHA512ac0fa45e1cf2279609e40bba66f777e3ac26a1cd5b023331ce54fee4023922c56e68d769bc34e357156eb7c546fde27412e0fd2e7ca33e6229d2b089bdc54ac3
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB