Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29/12/2023, 18:09
General
-
Target
rlbspoof.exe
-
Size
1.1MB
-
MD5
57c9b0afa7618d5b20f66862d5abd2af
-
SHA1
5da8b0618fe488e54ee9b3829e93f8dfb8bd86ff
-
SHA256
13afadb98471b64f70c416e0fe4566f997c87e8daebf9c0e89800ebd52e1c451
-
SHA512
b0f3858105d3c8672d4f3e329ee39298c1bfb55f8f12930d351907c677995be7407808df7bf0ded798adde9e29089c4fc236c22b1b3be46ce0575b4a4ef2225a
-
SSDEEP
12288:Na8bP+z6JdZiu/pOoSY4mM0UuhENTfYHuxQ11+trje6B+cF5bIkQ3pq+n:Nh06fpoDA3erYHuxC1+trje6B/F5bIF
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\rlbspoof.exe"C:\Users\Admin\AppData\Local\Temp\rlbspoof.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
1.1MB
-
Filesize
72KB
-
Filesize
5.6MB
-
Filesize
64KB
-
Filesize
240KB
-
Filesize
7.7MB
-
Filesize
64KB