Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
05/06/2024, 03:19
General
-
Target
c983282d4dae3d373b54b8f0550ff78f4256bb28f8b88cab1f62597a1c8b8960.exe
-
Size
775KB
-
MD5
bb9385bb3437b54e07f98e708727556b
-
SHA1
7059b51fbcb4704a1fb0e40227870ec13d4c0c70
-
SHA256
c983282d4dae3d373b54b8f0550ff78f4256bb28f8b88cab1f62597a1c8b8960
-
SHA512
5a3eb03f6b719ec403e089c14c285e4f1f1aba6ca2822066125906e2f02f7c46402519683b2a6427cbd2ab978ebd65f3b0b6a715e22ee26c8824ad4de1e69773
-
SSDEEP
24576:Vl1+mRW/3wJxfSf4gXe4i7ojhsP5Lgrk1TWb4AN5:kmRW/3wHfSfPe30jaNf1TWbdz
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c983282d4dae3d373b54b8f0550ff78f4256bb28f8b88cab1f62597a1c8b8960.exe"C:\Users\Admin\AppData\Local\Temp\c983282d4dae3d373b54b8f0550ff78f4256bb28f8b88cab1f62597a1c8b8960.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD56393e3aa2ae53593bb6ee6fb25fa329a
SHA11914c71b94854d78c3e18f4298c5d8ce7296e398
SHA256f5252433b34b94b0e9a9c2b2baa46e368f6c344dcb1e3a950b1a99a2cb92fcbd
SHA512b463089a1763ed78d9c8a402cf476500eeb163b091dee621c8022dd072b0d7e73a79c52d0ae02e2a7abfc5614565a5df52776bc4bd3dcca251a0d2e95cd4ec30
-
Filesize
800KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
800KB
-
Filesize
680KB
-
Filesize
680KB