Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08/03/2024, 21:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MMGUpdater-Old.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
MMGUpdater-Old.exe
-
Size
392KB
-
MD5
cede7c18763beaca5c457b02a5fbd1ba
-
SHA1
734f0192b6acb99d44578a8b76972d8e6f390ac9
-
SHA256
2bd5f8b6a8f0440bcdabf7726a372e16d904cda7fa0ac60ca8854787878aad79
-
SHA512
4bcbb92ef30080ff988b43ccac1bd9df0e7c30002d31bda2b3904c5a88192de3f2623d0c57fcfeda52a7444668220fa83f6b2ed9b89e5778d5677d010b4da5f9
-
SSDEEP
6144:IFZT8qbTR7Sv/nQwDjsUuhbq4BgGkpcqoyK4yWkWVz97GX5FbDW7F:YZwgVi/sLhbfvkpcqdDeWZ9O8
Score
6/10
Malware Config
Signatures
-
Drops desktop.ini file(s) 2 IoCs
description ioc Process File created C:\Windows\assembly\Desktop.ini MMGUpdater-Old.exe File opened for modification C:\Windows\assembly\Desktop.ini MMGUpdater-Old.exe -
Drops file in Windows directory 3 IoCs
description ioc Process File opened for modification C:\Windows\assembly MMGUpdater-Old.exe File created C:\Windows\assembly\Desktop.ini MMGUpdater-Old.exe File opened for modification C:\Windows\assembly\Desktop.ini MMGUpdater-Old.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2868 MMGUpdater-Old.exe