Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
05/01/2024, 00:20
General
-
Target
2c5615edec999ad45295624a6a5f54d0279d053a45c97eb1102367cf3f2849a7.exe
-
Size
716KB
-
MD5
dd87c5145fb5a5d412708296208bb17c
-
SHA1
f4386670898489c6d1dbaec36fbed46c1b4e8da5
-
SHA256
2c5615edec999ad45295624a6a5f54d0279d053a45c97eb1102367cf3f2849a7
-
SHA512
e56c41d654a079692124c10a38f9019c945d7fabb1b97d826714f8beb1cf77db580a35ea46223c1a1dcaa34a020c4174c0649f08175c0c94b3a8cff23d8068e3
-
SSDEEP
12288:M3P/aK2vB+eUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:M/CKAB7atr0zAiX90z/F0jsFB3SQk
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c5615edec999ad45295624a6a5f54d0279d053a45c97eb1102367cf3f2849a7.exe"C:\Users\Admin\AppData\Local\Temp\2c5615edec999ad45295624a6a5f54d0279d053a45c97eb1102367cf3f2849a7.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD50f8246c89e56a037dd21eae0d1bb70ba
SHA168d21efafe61b66d6751bf37137ca2ce1f50ab77
SHA2560ce5740ca9cb72dd665c04a78e2f6026e7bd38c5e75b4d52b09640b8ccc387ed
SHA512b3347aead91e6b02ce6e23d62a76ad04f7e894414b7d3076756dead413e7ea149c9f1a49dfac72a3787f0531515ba5d41a3c31d2ca0c7e3d6ec82e4ae0b6c2de
-
Filesize
736KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
736KB
-
Filesize
680KB
-
Filesize
680KB