Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 11:55
General
-
Target
1c5e3fb7273def46096f27d434d4fff9.exe
-
Size
311KB
-
MD5
1c5e3fb7273def46096f27d434d4fff9
-
SHA1
b25b36c573feb3c3dadfbab186c0b87783f66cf1
-
SHA256
0614c41fcc1d77563d0ebedf3a61090a5b2489eea4bba4812eddeea62958189d
-
SHA512
5258ddbe6d97d0dd6ac56c6be9233dd39ae92b9211e3688ea64c7ba9f157edd55f83de00b4da7cbd0ab2b2d07c1ec11f3e6bda10f2a5fff0ac67a68b8c9727cf
-
SSDEEP
3072:Ek6y38qiVy3aWuwpeTgYuAXHs+3xr9hvqBuMnwqCYf6I3HutHKc0Sps96pMFVzDS:Exg8qdPnsXM+3x9CwqCYfDO/W9bpyYq
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c5e3fb7273def46096f27d434d4fff9.exe"C:\Users\Admin\AppData\Local\Temp\1c5e3fb7273def46096f27d434d4fff9.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
241KB
MD54019c3f4733fc5887b969239140c67dd
SHA1e57bf75f8b7e361a11009c6112518972f82440fe
SHA256cafe6f185347c30bd74a1fd8e774471ef1c5886369b13db44b923a905c8b9006
SHA51274aabeeaf4d7304b64b7fe6642138663b0ff4e63a6bce57f8d23fba578e869af09fa94eb672e5176f1bcbb32b5ea95751f9dd201f83f773f8f368cbb8e087375
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
584KB
-
Filesize
5.6MB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
408KB
-
Filesize
64KB
-
Filesize
7.6MB
-
Filesize
264KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB