Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/12/2023, 20:31

General

  • Target

    11199498ca3dfc7310fe57f65ffb3c93.exe

  • Size

    9KB

  • MD5

    11199498ca3dfc7310fe57f65ffb3c93

  • SHA1

    77b0e719cfeca91335bcd51def6ebbebf0b68794

  • SHA256

    1f4131cfcfc29f3bf592378591456460c376888c8d538a91ea0a0da7276c3330

  • SHA512

    b69a4f82487adc4f815917b1ab15380b29ec11eb9cdcd676439fb57b3d9e928fdcd953677f3fbdb1afc74e601526c28532c3c7a2a70e1b9d7a25cd3ece624bd5

  • SSDEEP

    192:MBksu/EXVwV7HeMZZ3093VnjdwCzB3KQANKB:UVwpHeMoFnhwC99u

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\11199498ca3dfc7310fe57f65ffb3c93.exe
    "C:\Users\Admin\AppData\Local\Temp\11199498ca3dfc7310fe57f65ffb3c93.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:64

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/64-0-0x00000000009E0000-0x00000000009E8000-memory.dmp

    Filesize

    32KB

  • memory/64-1-0x0000000002A70000-0x0000000002A82000-memory.dmp

    Filesize

    72KB

  • memory/64-2-0x0000000002AD0000-0x0000000002B0C000-memory.dmp

    Filesize

    240KB

  • memory/64-3-0x00007FFF7A350000-0x00007FFF7AE11000-memory.dmp

    Filesize

    10.8MB

  • memory/64-4-0x000000001B930000-0x000000001B940000-memory.dmp

    Filesize

    64KB

  • memory/64-5-0x00007FFF7A350000-0x00007FFF7AE11000-memory.dmp

    Filesize

    10.8MB

  • memory/64-6-0x00007FFF7A350000-0x00007FFF7AE11000-memory.dmp

    Filesize

    10.8MB