Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
179s -
max time network
222s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 02:42
General
-
Target
37a4d697049b6150c95f65f9e791a208ea410502179702ee013fd331d6759993.exe
-
Size
1.3MB
-
MD5
432c291c7b5797ae2455691a3f6d5870
-
SHA1
ed2bed7877b07ebc11e0878fed87d0669c65a923
-
SHA256
37a4d697049b6150c95f65f9e791a208ea410502179702ee013fd331d6759993
-
SHA512
a8e997698adbead82414332a4195b5c86ef9aacad2ed70666d110973f668fbf24e9970494cc591fd6f4c92a86f491f1c00892c64517b4d2c78d5d3636998bb4b
-
SSDEEP
12288:z3P/aK2vB+IBXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDtW:z/CKABnBsqjnhMgeiCl7G0nehbGZpbD
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\37a4d697049b6150c95f65f9e791a208ea410502179702ee013fd331d6759993.exe"C:\Users\Admin\AppData\Local\Temp\37a4d697049b6150c95f65f9e791a208ea410502179702ee013fd331d6759993.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD5f47cf3e67d125957055eb765ed3fe193
SHA1eda09a9655b74e2102c80d39665467cfa88a39eb
SHA256d736dc0525ee53caeff308d0dba5a73abb4d9a3ca909d4e5abe7c1a7f00bf3c1
SHA5123e7aaa51ab8f7bcc8fa76a608f9216fc510477ffe01022f1afe7a54755bcd92adfa466bc6444a7ee504d793e718f728ae7af0e1605be5dd94439875293fa77f7
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB