Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

14/06/2024, 01:43

240614-b5ptwszhmh 3

Analysis

  • max time kernel
    51s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2024, 01:43

General

  • Target

    Dayz Evolucao.exe

  • Size

    64.5MB

  • MD5

    42074637f7f229be8b0739459b23f18e

  • SHA1

    b08e9f0817acfe2bd95fe0b656434719146467a8

  • SHA256

    04daee0f005100e97cdc3da52a3636743ead93c5e6cc127e60257f7d3517a2df

  • SHA512

    aff48ea5adb63d9562bd892a3cf5282998d56163fcad955aae5835988d4dd3f407305d17c50d92278c8a8bc13146fded91fbc0980bb98b9302fba04adf5e7514

  • SSDEEP

    1572864:lPSd4EBQu5hcEwdsETwPLwXn6493WnWo/w6680cRk3oIBLID15O:lo4YATaETeGUWCy89RfIBLWT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dayz Evolucao.exe
    "C:\Users\Admin\AppData\Local\Temp\Dayz Evolucao.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1068-0-0x00007FFFEFCA3000-0x00007FFFEFCA5000-memory.dmp

    Filesize

    8KB

  • memory/1068-1-0x0000013537FB0000-0x000001353C042000-memory.dmp

    Filesize

    64.6MB

  • memory/1068-2-0x000001355ECB0000-0x0000013563152000-memory.dmp

    Filesize

    68.6MB

  • memory/1068-3-0x00007FFFEFCA0000-0x00007FFFF0761000-memory.dmp

    Filesize

    10.8MB

  • memory/1068-4-0x00007FFFEFCA3000-0x00007FFFEFCA5000-memory.dmp

    Filesize

    8KB

  • memory/1068-5-0x00007FFFEFCA0000-0x00007FFFF0761000-memory.dmp

    Filesize

    10.8MB