Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 12:57

General

  • Target

    a3247fe3ecaabd183d04699fba5b67ca05fb71db5c21f6c8c9bbce64e5d23a3a.exe

  • Size

    1.3MB

  • MD5

    ebbae19646b810b16d21e4c4d9315895

  • SHA1

    cb5cbc5ab744f92f64a4aca003c6ca4624595189

  • SHA256

    a3247fe3ecaabd183d04699fba5b67ca05fb71db5c21f6c8c9bbce64e5d23a3a

  • SHA512

    578531796f921643b525b0a3d6c899454dc43721ecbe78cab9bd2edcd6122e8b1f1eb7e689083579462c360e850a4c0561a649455e21851da957daec0817c90b

  • SSDEEP

    12288:o09B+VPMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:o09BfSkQ/7Gb8NLEbeZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a3247fe3ecaabd183d04699fba5b67ca05fb71db5c21f6c8c9bbce64e5d23a3a.exe
    "C:\Users\Admin\AppData\Local\Temp\a3247fe3ecaabd183d04699fba5b67ca05fb71db5c21f6c8c9bbce64e5d23a3a.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/640-0-0x0000000000400000-0x000000000054C000-memory.dmp

    Filesize

    1.3MB

  • memory/640-1-0x0000000000240000-0x00000000002A6000-memory.dmp

    Filesize

    408KB

  • memory/640-6-0x0000000000240000-0x00000000002A6000-memory.dmp

    Filesize

    408KB

  • memory/640-7-0x0000000000240000-0x00000000002A6000-memory.dmp

    Filesize

    408KB

  • memory/640-11-0x0000000000400000-0x000000000054C000-memory.dmp

    Filesize

    1.3MB