Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10/06/2024, 21:21
Static task
static1
Behavioral task
behavioral1
Sample
4145f780e2622af22fb956b120c867a8c6cb412c248388c16755704f5423d169.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4145f780e2622af22fb956b120c867a8c6cb412c248388c16755704f5423d169.exe
Resource
win10v2004-20240426-en
General
-
Target
4145f780e2622af22fb956b120c867a8c6cb412c248388c16755704f5423d169.exe
-
Size
1.6MB
-
MD5
110d40792f9e41f8d3c8490b57893eda
-
SHA1
ffeb9d30abe8225b8eecab567d34e0141bd3c121
-
SHA256
4145f780e2622af22fb956b120c867a8c6cb412c248388c16755704f5423d169
-
SHA512
c99785e7fdc38f76cdf9f16cc14538ae80345cddc956d64a1b37a1f433ca706a3944c7d2e10a55dbb6983d8602cf00e4fd2c108bfc9e9b8ce90bc5985e51229b
-
SSDEEP
24576:EbL8KHFLHgZpJENUTWuKk0fob0gEEVFQmic8WU:2LzHFLHkJENUyuFlIAFQmd8WU
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 4145f780e2622af22fb956b120c867a8c6cb412c248388c16755704f5423d169.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2376 4145f780e2622af22fb956b120c867a8c6cb412c248388c16755704f5423d169.exe