Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25/12/2023, 16:54
General
-
Target
2ed1f7ad13c9a495c5aa865d3d14b2ae.exe
-
Size
625KB
-
MD5
2ed1f7ad13c9a495c5aa865d3d14b2ae
-
SHA1
0abc95cb4ee378e229c26712955a2aa7c3171dce
-
SHA256
b17138077edd43beeb48132e11edde68b65a058d2ffe5ae950b30e994df9275b
-
SHA512
ca5f3b4aacfcb2f2485e3f419eddcd856971d5a106510a4a5945782e97f2e8268e6797abb61db0fd859bc2febc84860544fadc39b337ecbd87d3aadb80c6e0a5
-
SSDEEP
12288:PVt+w8wyv/866WoJfpdYKiOJudAx8b/0htENCSUEtn:dt+w5ysDJf2uudALhtqCiJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ed1f7ad13c9a495c5aa865d3d14b2ae.exe"C:\Users\Admin\AppData\Local\Temp\2ed1f7ad13c9a495c5aa865d3d14b2ae.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1588 -s 3562⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1588 -ip 15881⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
944KB
-
Filesize
944KB
-
Filesize
944KB
-
Filesize
944KB
-
Filesize
944KB