Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/04/2024, 14:59
General
-
Target
f1e7ea6ba820264681a9c214476e0f8962aec14965a21552a7c6518c825a6845.exe
-
Size
1.3MB
-
MD5
d9d03de9a09de23aba63c42f54015e02
-
SHA1
d9e456ddcb6adcf8b818832c4c4be480633ca5a5
-
SHA256
f1e7ea6ba820264681a9c214476e0f8962aec14965a21552a7c6518c825a6845
-
SHA512
49f06dfcd6e36e048b7345df11d149c094fa8e4c47896abd2c4c14932cf8db77a4a42138e32af903d5a26ea8dae8da7f1522bacbc0962e01e22f7dfd09085c78
-
SSDEEP
24576:EW9BIl11tmlNQ2OnBdFQtP51llPup33kT:ESs11tmlNQ2ayVup3
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1e7ea6ba820264681a9c214476e0f8962aec14965a21552a7c6518c825a6845.exe"C:\Users\Admin\AppData\Local\Temp\f1e7ea6ba820264681a9c214476e0f8962aec14965a21552a7c6518c825a6845.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD5e96a3d448a3cd98cf79d65951786b73d
SHA15c8d536dd83d87affc5c328d35de2f275a66cddc
SHA256358b7d1b330859580280ce40acd85778dc82267bb1afc7550e404a0df2f99171
SHA512b477212513f563ce9e5d0c1d17507c08ee6c4f6eb44807934b808b4559f4d0297e53feb8446d2e7cc1237c1aff8f1c92fca3f08ec2bd822763fe2b9b8766f4eb
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB