Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    33s
  • max time network
    69s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2024, 12:31

General

  • Target

    463c0e6469310f5b7845e4e72b36d39d.exe

  • Size

    9KB

  • MD5

    463c0e6469310f5b7845e4e72b36d39d

  • SHA1

    8cf495ec193a48a651b117f1d3f380d7b0808680

  • SHA256

    2936dd2916006f8c98c2c816e526a2c06dbe31d763d8465986cb6c7f2112c3d7

  • SHA512

    497bffdb45763fdd4c4554e0084be3182d7437954c162057b48ff37b2629b9d9ac11dcef2d029ceefa5db3ed046189deddf4e8969fd69301e4620cf979f02cb5

  • SSDEEP

    192:UBksuLPY82gQv5F4JtOeMZZ3T93VnjdwCz03/cSzb:c82l4JtOeM9FnhwCQvcSz

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\463c0e6469310f5b7845e4e72b36d39d.exe
    "C:\Users\Admin\AppData\Local\Temp\463c0e6469310f5b7845e4e72b36d39d.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4620-0-0x0000000000D30000-0x0000000000D38000-memory.dmp

    Filesize

    32KB

  • memory/4620-3-0x0000000002E20000-0x0000000002E5C000-memory.dmp

    Filesize

    240KB

  • memory/4620-2-0x00007FF9386E0000-0x00007FF9391A1000-memory.dmp

    Filesize

    10.8MB

  • memory/4620-4-0x0000000002FE0000-0x0000000002FF0000-memory.dmp

    Filesize

    64KB

  • memory/4620-1-0x0000000001500000-0x0000000001512000-memory.dmp

    Filesize

    72KB

  • memory/4620-5-0x00007FF9386E0000-0x00007FF9391A1000-memory.dmp

    Filesize

    10.8MB

  • memory/4620-6-0x00007FF9386E0000-0x00007FF9391A1000-memory.dmp

    Filesize

    10.8MB