Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 21:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
794443f85451a23a25fcf7a622c362cba696a4091a99a15feb6aab183daa314b.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
794443f85451a23a25fcf7a622c362cba696a4091a99a15feb6aab183daa314b.exe
-
Size
652KB
-
MD5
a9ee25d881f93669250861f43dac0b72
-
SHA1
819a5873223b02f6433be84ec981d2bda590d3f0
-
SHA256
794443f85451a23a25fcf7a622c362cba696a4091a99a15feb6aab183daa314b
-
SHA512
ac4f00ed5e646d1ba0bba34394a92f9b0540fa697b413c1faa98a1f82120d059b8ea1f594179cb3fa9671dd8bcbc4f08c243910b632da895ed19baea6f9bb081
-
SSDEEP
12288:QpChUdPGWYp/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXRE6:QpChUdPGWO/i328ab4F+rM/aXq6bJfB9
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 794443f85451a23a25fcf7a622c362cba696a4091a99a15feb6aab183daa314b.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4700 794443f85451a23a25fcf7a622c362cba696a4091a99a15feb6aab183daa314b.exe