Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 11:21

General

  • Target

    8828bf5cf12662b178775316ae6d08c2.exe

  • Size

    257KB

  • MD5

    8828bf5cf12662b178775316ae6d08c2

  • SHA1

    d54f5104a237a115a77e4e0d43e4be7aec3654d5

  • SHA256

    15e8864e9cfc6c0273b840c633b3fb1602d7e42f5ad0f7241e64e07b5e84f7a2

  • SHA512

    64f776695d6b4bfc59a7c30562195afa6d73103d037871943e3fa88b8f59c95df54ecaebdf6573da5c46318a297f192770f99c0c7b11b964a80ef03026acc51f

  • SSDEEP

    6144:EDKW1Lgbdl0TBBvjc/U9dpC6+ZSCpPugvmGLW70:Sh1Lk70TnvjcApCdZHW70

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8828bf5cf12662b178775316ae6d08c2.exe
    "C:\Users\Admin\AppData\Local\Temp\8828bf5cf12662b178775316ae6d08c2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1660-3-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/1660-2-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/1660-5-0x0000000004B20000-0x0000000004B56000-memory.dmp

    Filesize

    216KB

  • memory/1660-4-0x0000000004C80000-0x0000000005224000-memory.dmp

    Filesize

    5.6MB

  • memory/1660-11-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-41-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-59-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-69-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-67-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-65-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-63-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-61-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-57-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-55-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-53-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-51-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-49-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-47-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-529-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB

  • memory/1660-528-0x0000000004B80000-0x0000000004C12000-memory.dmp

    Filesize

    584KB

  • memory/1660-45-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-530-0x0000000005250000-0x000000000525A000-memory.dmp

    Filesize

    40KB

  • memory/1660-43-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-39-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-37-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-35-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-531-0x0000000006220000-0x00000000062CA000-memory.dmp

    Filesize

    680KB

  • memory/1660-33-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-31-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-532-0x00000000077E0000-0x00000000077F0000-memory.dmp

    Filesize

    64KB

  • memory/1660-29-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-27-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-25-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-23-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-21-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-19-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-17-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-15-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-13-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-9-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-7-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-6-0x0000000004B20000-0x0000000004B51000-memory.dmp

    Filesize

    196KB

  • memory/1660-1-0x0000000074ED0000-0x0000000075680000-memory.dmp

    Filesize

    7.7MB

  • memory/1660-0-0x00000000025E0000-0x0000000002618000-memory.dmp

    Filesize

    224KB

  • memory/1660-533-0x0000000074ED0000-0x0000000075680000-memory.dmp

    Filesize

    7.7MB

  • memory/1660-534-0x0000000004C70000-0x0000000004C80000-memory.dmp

    Filesize

    64KB