Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
80s -
max time network
81s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
24/05/2024, 10:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Meatspin.exe
Resource
win10-20240404-en
windows10-1703-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Meatspin.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
General
-
Target
Meatspin.exe
-
Size
4.1MB
-
MD5
e7c0320cb474f7f0f34ad25c3e343226
-
SHA1
d9780cfbb2bd28f0596cff1dcc9ff10a303e78c1
-
SHA256
3d733b07ec2bbf0c7c5c967d7cb5a6a1ec9a2da1b07d2f9afd95938c661ab0e6
-
SHA512
5552332982d55fe9427b79b749555a8f8463f35a1706c92da16b2f277d07f17df35e4279463e15a5714502770b04086e6e4383f996917ed7ee2fe46eefae11a0
-
SSDEEP
98304:l5vZrA4uwhD0S+VVndh1R7hn7JLKtzLqUoM+pLm/13Izo0i5pse:lLrA4uwZ4VndDR7hn9+qMYy3IzoTn
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4908 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4908 AUDIODG.EXE -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe 4920 Meatspin.exe