Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
29/12/2023, 12:20
General
-
Target
a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5.exe
-
Size
223KB
-
MD5
7cd2047afc4cb57c9bf0db6298fa93f2
-
SHA1
191af944c3e4595853f7133d17bc338eadf68c22
-
SHA256
a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5
-
SHA512
0831ff19281a241e887f72422610d78423f95d7cbad6aac9a922207bb677dbba2ee0c18702009aaa59450d55183817f425642be27bab38ce30385545d768356b
-
SSDEEP
3072:ZZ7wXfSRZ0ON/EwW66wN94xu4CkAZJM2k5D66L+NfGbVON2Nqi/6gS5UoWXHz72n:zwPSUONLNsuWA7koN+boRi9S6oiz72D
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unexpected DNS network traffic destination 3 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5.exe"C:\Users\Admin\AppData\Local\Temp\a5693579c54f44de4fb5da56bb29ef31b4e54eda9e508d6f1141ae041e0161d5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
440KB
-
Filesize
440KB
-
Filesize
440KB
-
Filesize
440KB