Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
23/04/2024, 03:17
General
-
Target
e344a147763ea02fca1e44a58469085be41d41d7277bd445162f9ddb7f1aa1ab.exe
-
Size
706KB
-
MD5
b2c8cc280cc586c61c3c7b270e54e41a
-
SHA1
0047120480bc07f860cc52fcae5f26c02985807f
-
SHA256
e344a147763ea02fca1e44a58469085be41d41d7277bd445162f9ddb7f1aa1ab
-
SHA512
602e0f061ee3ece7155b3cb43bbb412e7404c84e750cef26db9deadf9a083eefdd7a5bd397b142a8e437aa12351d38310f3036b1cf1f7e47927d79f8da67f435
-
SSDEEP
12288:CPiB+t2FCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMkiW:CPiBx8NDFKYmKOF0zr31JwAlcR3QC0O3
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e344a147763ea02fca1e44a58469085be41d41d7277bd445162f9ddb7f1aa1ab.exe"C:\Users\Admin\AppData\Local\Temp\e344a147763ea02fca1e44a58469085be41d41d7277bd445162f9ddb7f1aa1ab.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD5c18707a173c6aa209d495133142c351a
SHA1d9a325e2e0a832fd8526335ac76515d87fd06615
SHA2561f49f1ac9ea7c0922e84dc9214b541174a9b28689ba8e1f7309187440240f409
SHA512ffab147d98105222e0caa21ae943b965e2916bff51f4282b50ed65a194a96cff27c2d79a904c7a5287c64345ce4616465ba05101ed279530f3401946e79e7f9d
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
724KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
724KB