Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
170s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 10:53
General
-
Target
16816ef22fb60ed07969338aa0c67971.exe
-
Size
704KB
-
MD5
16816ef22fb60ed07969338aa0c67971
-
SHA1
bb896a28e71447fc80e00d76303bea6f54daeab5
-
SHA256
f1705db02e07fd63cdaf95821705d323a2a5007fe83ba36d3b33f7844d920dce
-
SHA512
557e6a97ad88eff887d2a0681dad2f5da131e58777cdf8158fd4f9680f6120b41bb0241c795e2c092fcb2ac8d6e914a4110249e48dd75474c895ae9e482d3d65
-
SSDEEP
12288:A7Aywe8ein543ZgVyGYJ45jx220y22dfNDnju06/pn95crwsjpzJ/6A:A73ue2ht5jxZ0T2dfNDnCFN95cEsjpVF
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 6 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 13 IoCs
-
UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory 7 IoCs
-
Modifies registry class 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\16816ef22fb60ed07969338aa0c67971.exe"C:\Users\Admin\AppData\Local\Temp\16816ef22fb60ed07969338aa0c67971.exe"1⤵
- Loads dropped DLL
- Enumerates connected drives
- Drops file in System32 directory
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD57050d5ae8acfbe560fa11073fef8185d
SHA15bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b
-
Filesize
98KB
MD59c7044f6d79bc3c90f18cc8139d8ad7d
SHA1c25529b195635aabe22d7fcb811abb21664668b1
SHA256e5cd937738f85ca450d9b33b974dfe878241a18c821bcde0b7912b0a8e0ad12e
SHA512e10d3d80f9237050929df4dbebfd754a7306cb8f1c59905085b1e91827629a60678e53d4eef1ef330e2106769ca78182166cee4eef87dd219929abcffd33f442
-
Filesize
133KB
MD546cb4c21b83ea126c60b21ddbbdd6d00
SHA1035df9428fbd233e47b563f5415a8d56983b3884
SHA256ca722c59d53a83b7143d3f91499f0b7e69d7bd73201ebe394b3f8c0df15699b5
SHA51239fff01799f5fc2ceefe2dd0c9b2b2d20d59fb0fc24cf7d5f06ba8aa8220677d30429456f5b2a27993da313fb6ded0766dbd77616a5ae1a7d6ac60fdb442cd52
-
Filesize
13KB
MD584b565550bd8997ff83aaf4ba14ef0eb
SHA1f8422c024746cd3f850d45dfb4bb3eaa19eeaa9d
SHA256715adfd037907933fa3aa6dc6a7fef768ea0ef918e81ecfc978774ebe0b9f248
SHA51254cbfcfc64c788418f98bd2cb40f3f73b23022079f3845705921ac37a39f8caa517c1a7fa9d21f2304c23a323a589a7957f477c1af25f01f2bdcaa5b7ea01716
-
Filesize
138KB
MD5fe2d05ab41157fe95369363d61303f5d
SHA12901359b13046fc1a0f5a58d2ab1085c89661929
SHA2560f81394b61f82ac71024bd6a48528849907acbc36359f73a6b1b15d70b20ed42
SHA512bb0d7954ffaf884ac13f676d91d906489bb806911b6461d5b9cb87c28060ea2ff834e8d1c034a3586efd3cdeb9e1d6ae39987363c2c298516f1f29c4d9697ba2
-
Filesize
40KB
MD5dc7a3bc0fc185cd68848dc6f7d7b026b
SHA1c661cb1198f5e3927a67884e71ca95ff33026224
SHA2566618b3ab331642449f0b07e4f39abf9fc3bb90ae90b298f1b9ffd58ca5397399
SHA51222c9b2b7930e9e442699e37f43944f7cb4cd2562ed8319b4341c59475fa8071b501f4908227378b7883930f14c3059f66531bf876b386dea0027151b08006577
-
Filesize
78KB
MD5657837561161fc3d120a864c9b9c5222
SHA179efed6dc222a2f02dfd8c755cb7ec3891bc83d7
SHA256456cf26d92738f58ab97d963b724c7dd3da9106ed3f916fae124c84a0a4ae0ab
SHA512d6e23dea6f087901d008720b1feacaae06d049227e47726d42e7610c401421d9e402baa45d0ec672e0120340a3cfaa9e972cb430f4e4adea5a3ceebcb9cca208
-
Filesize
38KB
MD558382ca168ae7338147ec1221122ad40
SHA16f7c5636d607909fa989d7c857acbd4b555a3238
SHA25694cb2040a4607129e5caaf028a06d99a3f595bb1d475ee7a71245b234ee0d643
SHA5127ee1352c8ae31f5b9c8d5faa29a66c25354d56a3f807e7eea9ed227af880ae215396570cdd66c2eace303f281e324b60ee2c226bd460775714db8bacfe6fdcf5
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
208KB
-
Filesize
2.5MB
-
Filesize
248KB
-
Filesize
656KB
-
Filesize
124KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
44KB
-
Filesize
2.5MB
-
Filesize
656KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
656KB
-
Filesize
2.5MB
-
Filesize
124KB
-
Filesize
44KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
248KB
-
Filesize
2.5MB
-
Filesize
656KB
-
Filesize
248KB
-
Filesize
280KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
208KB
-
Filesize
124KB
-
Filesize
2.5MB
-
Filesize
280KB
-
Filesize
248KB
-
Filesize
208KB
-
Filesize
124KB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
656KB