Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 13:32 UTC

General

  • Target

    f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe

  • Size

    705KB

  • MD5

    73aac1a1a9b6c434522fe3b0ad36b4de

  • SHA1

    1de4560cdc3cc10369157d27b31aa1ce024aa0aa

  • SHA256

    f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4

  • SHA512

    e3376af9b4861e999336c4764f5ee7c33d8a04b1f66161d8a24e22456fa61cfcb2809992e78684b56ed2079e44b5586dd5b779204ff4dce5b3c840d391dea7c9

  • SSDEEP

    12288:kW9B+VOFT0Iviu1cEftqaDpUOvw07yHTmpTwF008SzgpJCAWRXz9K1/XtQtQtF:kW9BBTB71ckJtUOv3c8Tq0C0JCAWRSlr

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe
    "C:\Users\Admin\AppData\Local\Temp\f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1632-0-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB

  • memory/1632-1-0x0000000000530000-0x0000000000596000-memory.dmp

    Filesize

    408KB

  • memory/1632-7-0x0000000000530000-0x0000000000596000-memory.dmp

    Filesize

    408KB

  • memory/1632-12-0x0000000000400000-0x00000000004B5000-memory.dmp

    Filesize

    724KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.