Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
448s -
max time network
1172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
-
submitted
14/12/2023, 15:24
General
-
Target
Release/plugins/Fun.dll
-
Size
10KB
-
MD5
c87e248ddb9bec97b132ee616b5b9e4d
-
SHA1
ddd715a1171697a472ceb7e76141e56661a9b887
-
SHA256
22001b55c1b3e7dede5d8277003bfee4ef10cc9e9e105018b1db6b0c7d43a529
-
SHA512
661f26aaa95c80dafc5a27fd40da73fad729bd2637684c7122e65a0d47af490f35d3a567095aef518e5069ed0715d507857689d40ebf62549566bbcc08cfecef
-
SSDEEP
192:CUnoWhQZ6XiYn2JJeGPgfR85+E9EcgdTXIaONBhMU:CUnriEX0JJeG4fSF9EceJO3hMU
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Release\plugins\Fun.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB