Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12/02/2024, 13:28
Static task
static1
Behavioral task
behavioral1
Sample
keygen.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
keygen.exe
Resource
win10v2004-20231215-en
General
-
Target
keygen.exe
-
Size
324KB
-
MD5
1537dfb19e396ee3687019d65b59db97
-
SHA1
d0c35e7c5b3a6d0c9195408e21d28fd33020a0da
-
SHA256
4a435e0b87e8bd6f3e9f9b306f661ff5428017f33f742fa0788107212757f64c
-
SHA512
20076cd879e28d911d1288a6f70450eee75bd9446ba9479f5ad18488f05a1e775999de1384fa239ff914f8d810220ffc5e7a15bb9f1a4eb4c8f8c11b85836e9c
-
SSDEEP
6144:nCWyPqAbxbDv6qjWYN0JdGn/oq/PO3sPQ/aH8ooxZPfv8I8:CQ2DvjjLNkdGn/oWPa1/aHCfb8
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
pid Process 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe -
Suspicious behavior: EnumeratesProcesses 28 IoCs
pid Process 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe 100 keygen.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4316 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4316 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\keygen.exe"C:\Users\Admin\AppData\Local\Temp\keygen.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:100
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4ec 0x5081⤵
- Suspicious use of AdjustPrivilegeToken
PID:4316
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5e6144fb36c1fdc6ba1d1afa9632588f8
SHA1c4964264c6600fde210a644b639e2ea25ecb67e6
SHA256b141412d0611571df381c26186b3fc438c725d6e45ad66fd76413322c17a9ac6
SHA512400ca4e2ad987a88429da21d795f7365bd230ed4225e19b7841dcc09606e0afde2f3cc31aa8be4ee83dd3c6b0339cb2c13953523bdc8d2f547d953c6c6c8d339
-
Filesize
35KB
MD576a9565c5f51775719eebda1f25530a5
SHA1332feae4dba6b4a93bebea7a881a0fa758891091
SHA256a1a7c4f74d4fe7784ed03709e5f946b94cc10a64e3ae0ad5a9a3bece9a8a2c0a
SHA51279c9af704d1626cad9d44470585baf8d5f082b5d77c285fc6ae4862e99439f838fe9b1e745f8f2487fa64d5d7304954f66d0cef222db4dc9095a7294172094e9
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822