Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
19/01/2024, 15:49
General
-
Target
传名网络内部服务器管理系统 v1.0 简化版/host.vbs
-
Size
18KB
-
MD5
2c4c65db0b7e72f0dea35257d4ec1595
-
SHA1
3a6e7a366cd6222842f418b71e1d7ce146d0d784
-
SHA256
c68946f402c1bd32354c6828f58ef93e33ff1e07a0ca2ec3ac2c5907f3a7bca3
-
SHA512
c52c9e424b911692cb40e61d6a39e957716ee26f7707eda9c0e5ee0b82cb0bb097b799e0c0aeaaec5530a661bdce0a35fb4ba68f2e20561aebf6ed7d600e7681
-
SSDEEP
192:A7TDqlTnYot4KQzgtccBxe+kmQgcoCVH+P/Ey6SzR6DYm96iQ+NVOVy5WDvj+QUn:Lmq4h+Lco4+Pjy9QUVfWDiQTFB/h1ob
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\传名网络内部服务器管理系统 v1.0 简化版\host.vbs"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB