Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
28/05/2024, 07:32
General
-
Target
Shkolnik-Goliy.exe
-
Size
4.7MB
-
MD5
1d7ec5c0d6ee4de23463e0d80d9b7b79
-
SHA1
743d3856c750e7a2a3254ba6e69d15b8146697ad
-
SHA256
05569c64af3c01d4094782cfedf3d167288167c13ba25c1562235396dcb15cf7
-
SHA512
3137d4c5f53490792dcc4d4d9baef38e5a2a4ee6fbfdeb3dd57039e8ce3f5de3f7dabb728f17e478287fb9b34717ed108228ace7be180f0b226f61ba10f24a0d
-
SSDEEP
98304:gKoW1yuV8k3fzGyW4u6vJeQAlC6vIpa8R7jUTgRk7Z3c/tIoVPU0MDrqO9GF0thM:gK193M4u6JeQMC6Wa8pjUTGk72/tjK0T
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Shkolnik-Goliy.exe"C:\Users\Admin\AppData\Local\Temp\Shkolnik-Goliy.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2f0 0x3cc1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4.7MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB