Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/01/2024, 10:51

General

  • Target

    6770080775fd439a8c4a0e99d28b731c.exe

  • Size

    1.1MB

  • MD5

    6770080775fd439a8c4a0e99d28b731c

  • SHA1

    d63542902d0874c75343ce6883160ba7333848be

  • SHA256

    b113f6495d23ec4fb00599c5198b2af38e1a389a9ed0af485b2805e7294f45cf

  • SHA512

    889ae3bd20e582b667fe0987afce2d207fddeb4bfa11e3d99d8a73621485df00487431aa57c07c2d7852c659b241fbfe03ba66c81c4dc38c4d323d96c0499e9a

  • SSDEEP

    24576:eDyTFtjqsH5utjhDyTFtjpDyTFtjuDyo1tjusH5utjhDyTFtjpDyTFtjqsH5utj3:LtWrtitSt0tyrtitStWrtitSt0tQt

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6770080775fd439a8c4a0e99d28b731c.exe
    "C:\Users\Admin\AppData\Local\Temp\6770080775fd439a8c4a0e99d28b731c.exe"
    1⤵
      PID:2136
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
      1⤵
        PID:2404
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k UnistackSvcGroup
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:3404

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3404-0-0x00000279FDA40000-0x00000279FDA50000-memory.dmp

        Filesize

        64KB

      • memory/3404-16-0x00000279FDB40000-0x00000279FDB50000-memory.dmp

        Filesize

        64KB

      • memory/3404-32-0x00000279FDE70000-0x00000279FDE71000-memory.dmp

        Filesize

        4KB

      • memory/3404-34-0x00000279FDEA0000-0x00000279FDEA1000-memory.dmp

        Filesize

        4KB

      • memory/3404-35-0x00000279FDEA0000-0x00000279FDEA1000-memory.dmp

        Filesize

        4KB

      • memory/3404-36-0x00000279FDFB0000-0x00000279FDFB1000-memory.dmp

        Filesize

        4KB