Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 12:14
General
-
Target
6da456a232ef96d2bb37bdb7f3140bcd.exe
-
Size
196KB
-
MD5
6da456a232ef96d2bb37bdb7f3140bcd
-
SHA1
60470e0f0f32781964f0764e8cfbe57293efa9e6
-
SHA256
46c84762afded842e86f3819deaa6c363623e279e6c179a9975cb2c60262e255
-
SHA512
1c3de4460f2946d358fc517bb448672acad91bec6222602c3ca5024c40b0b44d9c1840ce09e724dd96ee3f10dfaba7b5ffbbc3328473f4a0d0d2098300fa3d13
-
SSDEEP
3072:d1lqftjX7g1BNOob8NTfN59kgN1ZkY83U+s7bpVCYlQCxFflyb2CRIzvfsrKBJ/:dCfds1S0yn9kEdisHbCfoFflyXGvf1
Score
7/10
Malware Config
Signatures
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6da456a232ef96d2bb37bdb7f3140bcd.exe"C:\Users\Admin\AppData\Local\Temp\6da456a232ef96d2bb37bdb7f3140bcd.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x51c 0x4981⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
684KB
-
Filesize
4KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
4KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB