Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
20/06/2024, 01:17
General
-
Target
59995687fb6d23f8a2ed27cea80df13af791f581e029b83903606f262b4bb4af.exe
-
Size
11.3MB
-
MD5
8867e727cdd2f7e89ecbf5bd7300be8b
-
SHA1
0ce9927ef786a96bd7280913a41cccd85289a461
-
SHA256
59995687fb6d23f8a2ed27cea80df13af791f581e029b83903606f262b4bb4af
-
SHA512
44cec2dcd346a0513b71b0cb967c6c0ed5e38654f207a99a1831a2bcab6de1a41f8c5d2acf51e3587507df90429b19f02a77c7faa3129ca4695bf3e1a85d68ca
-
SSDEEP
98304:zfHMKz89taGALzwMIAj4xAR6HhMIQQCYFhMD+SNfCWtw6MD+SNfCWtwGdYx:TXAHKzEAWwIhMIQQQRtwbRtwGKx
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Loads dropped DLL 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\59995687fb6d23f8a2ed27cea80df13af791f581e029b83903606f262b4bb4af.exe"C:\Users\Admin\AppData\Local\Temp\59995687fb6d23f8a2ed27cea80df13af791f581e029b83903606f262b4bb4af.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
292KB
MD53d51d920b416ceb1c2354d7b1d5bb9a9
SHA1dc7c6ce78a2e62610bb4b3fb6ce2b1967ce022b7
SHA256647ecc661d2c072a8b3567864a5ea4cf3797487e32488472192b4741320d1813
SHA512dcc39102b83ffd0dc1825319c4584b5e193f77173be9afbc51b7b6fd30084798d4bd2da393fc315af9011b0f2ea5309473666536457e2fcd9a2b1fcc8bec4dc3
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
672KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
8KB
-
Filesize
11.3MB
-
Filesize
528KB
-
Filesize
72KB
-
Filesize
32KB
-
Filesize
2.4MB
-
Filesize
10.8MB