Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04/02/2024, 07:32
General
-
Target
09fc7d08364ca002e0b7d11af936349c4f126ada9f3a6212c1ef81c6c158110e.exe
-
Size
705KB
-
MD5
416284d6a9b84fcdb0a8125dc34aafb2
-
SHA1
afc3e02e6a706fae6c82d548c5fdd4130dabdb60
-
SHA256
09fc7d08364ca002e0b7d11af936349c4f126ada9f3a6212c1ef81c6c158110e
-
SHA512
f1951e377e32f7ad2f2c20e963fd514f614120ca8177c652d7f51e38fd9a7eac00fc7c9a343555a5b95efa451dbe1340d05c136599095f56e30df7ee39bb2d84
-
SSDEEP
12288:TF9B+V2NUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:TF9BVatr0zAiX90z/F0jsFB3SQk
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\09fc7d08364ca002e0b7d11af936349c4f126ada9f3a6212c1ef81c6c158110e.exe"C:\Users\Admin\AppData\Local\Temp\09fc7d08364ca002e0b7d11af936349c4f126ada9f3a6212c1ef81c6c158110e.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD561fcb9345baf7881f6f9465b720d9558
SHA1158e2d1372bf82b7500e9f58dbcb1843e167b2a8
SHA256612e905ea24b9b5caac3e2b08e8ffee9f814d3062021f3ffd6ce8ec14c36c12f
SHA512cd4175a53d64658cd3f04a23fe765ce62b7a320fb3ada802e1fd29a1eacab129a935ff945ea72ca35165130685fc0a1230049c91cf2146627bcd5dc3ac3225aa
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
724KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
724KB