Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 08:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe
-
Size
1.7MB
-
MD5
4c51d84f540e76e0dc6e5eb4b080d7e3
-
SHA1
ddea9157f11fd358cb5d35d08038a224dfe832ba
-
SHA256
ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b
-
SHA512
33cb7772b2c9d0c5f63df4b0c6660a746de3729e092c0e9c4722f1e3a11ad508b38ac7e1cb15e2820beb475095b8304d7a7aa358d5706b172f4c7cb2f3ecd9f7
-
SSDEEP
49152:cA1qm3QQO4CTVW1WRk6J9IlGXT5XboZ4:NkM1W/I4D5roW
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe Token: SeDebugPrivilege 2308 ab5134dee7794f019a8ec886084a3245e42a4886412d6f2f12e814453668336b.exe