Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    79s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/06/2024, 01:55

General

  • Target

    be9983ecf2c9e9c484e62bd48030078741d67d17be5fc184386dceb903670b43.exe

  • Size

    3.7MB

  • MD5

    5ebbdf98dd84e849abbf2564529eb356

  • SHA1

    ec023f3a4cbbf54827ce62ef4f5518df41056f89

  • SHA256

    be9983ecf2c9e9c484e62bd48030078741d67d17be5fc184386dceb903670b43

  • SHA512

    6132bf6dbd775f07deb14b7e87e1f8410a4f343a13a628ff170eaeaef222cffb4766c04be11036cb0e9788e160d2301ba5fa9b89944d68b8d55843856347b316

  • SSDEEP

    49152:otGUv/d3kPVRGXgQdyQC3oM48DjZx5duk09tePOUAst82va4s3:otGUv/xkPugQdyQC3oM4V0FAstJvaV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\be9983ecf2c9e9c484e62bd48030078741d67d17be5fc184386dceb903670b43.exe
    "C:\Users\Admin\AppData\Local\Temp\be9983ecf2c9e9c484e62bd48030078741d67d17be5fc184386dceb903670b43.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3324-0-0x00007FFF9E763000-0x00007FFF9E765000-memory.dmp

    Filesize

    8KB

  • memory/3324-1-0x000002C73CE10000-0x000002C73D1D4000-memory.dmp

    Filesize

    3.8MB

  • memory/3324-2-0x00007FFF9E760000-0x00007FFF9F221000-memory.dmp

    Filesize

    10.8MB

  • memory/3324-3-0x00007FFF9E760000-0x00007FFF9F221000-memory.dmp

    Filesize

    10.8MB