Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/01/2024, 06:35

General

  • Target

    5a89083afce51cc7d9c52bd96fc6037c.exe

  • Size

    22KB

  • MD5

    5a89083afce51cc7d9c52bd96fc6037c

  • SHA1

    549c4b8bb3c32ec38d51beba6df1baf76058be71

  • SHA256

    78fd3eee5cf57bc88671b33c582b0d6c1c44748b1d1e4d598373580dae8bd7be

  • SHA512

    f12746049df25e74192458ca910f8cedc00ff283e70d6ef49b9bc998c7be330dfccc41b96d054b7eba5455f156f0be6ea483771a1a8f4776f52c853bde5cf04c

  • SSDEEP

    384:+US2vDZ7VlADFqX6mGu9Y99YBkodDFQLDTrb/Sr26QCeLFrVLry/wjLHLvmCRnFs:+h217/ADEqmj9YcqoFFoDr/K8CeRkmLq

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a89083afce51cc7d9c52bd96fc6037c.exe
    "C:\Users\Admin\AppData\Local\Temp\5a89083afce51cc7d9c52bd96fc6037c.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4432-0-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/4432-1-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/4432-2-0x00000000004F0000-0x00000000004F1000-memory.dmp

    Filesize

    4KB

  • memory/4432-3-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB