Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/02/2024, 23:04

General

  • Target

    aa629cb48203bc86e82237e921a5cf90.exe

  • Size

    9KB

  • MD5

    aa629cb48203bc86e82237e921a5cf90

  • SHA1

    1a92fc096e0edf60f7ee8f3c8dbce4ca28b6e83a

  • SHA256

    f2d994e46111b4c1bfa6b87c4c2c05209788473ad447f5ddff496e24100cebb1

  • SHA512

    079600ec1dc390f2588554db581a7d47b545f83425583b337991ca86c0a50a4df37fdf7fb77d597e0169d1eb90cce09cc785ac91b150d6514afdb9fd318ad585

  • SSDEEP

    192:WBksunPY82gQv5F4s3tdeMZZ3e93VnjdwCzX3P/omABT:i82l40tdeMKFnhwCLImE

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aa629cb48203bc86e82237e921a5cf90.exe
    "C:\Users\Admin\AppData\Local\Temp\aa629cb48203bc86e82237e921a5cf90.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4100-0-0x0000000000DA0000-0x0000000000DA8000-memory.dmp

    Filesize

    32KB

  • memory/4100-1-0x0000000003050000-0x0000000003062000-memory.dmp

    Filesize

    72KB

  • memory/4100-2-0x00007FF943FE0000-0x00007FF944AA1000-memory.dmp

    Filesize

    10.8MB

  • memory/4100-3-0x000000001B8A0000-0x000000001B8DC000-memory.dmp

    Filesize

    240KB

  • memory/4100-4-0x000000001BBD0000-0x000000001BBE0000-memory.dmp

    Filesize

    64KB

  • memory/4100-5-0x00007FF943FE0000-0x00007FF944AA1000-memory.dmp

    Filesize

    10.8MB

  • memory/4100-6-0x00007FF943FE0000-0x00007FF944AA1000-memory.dmp

    Filesize

    10.8MB