Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
26/06/2024, 01:10
General
-
Target
4ca4219bde5c4f0edba1acacfafaf15b5aca78682279fb903a8085f6431f4c98.exe
-
Size
4.9MB
-
MD5
fe8772fc2d46c08a243fc540019549de
-
SHA1
1b67596427b65d1bf94b08b06928633eac2d24a9
-
SHA256
4ca4219bde5c4f0edba1acacfafaf15b5aca78682279fb903a8085f6431f4c98
-
SHA512
0f3938c92f67479178e3e2f87794b25c7548a9e9a911c0ed71344c565f8fcdc358e4bebac0b5cb821a14900776595b184e98ba7e726076fc93fb66ee703dfab8
-
SSDEEP
98304:b9/VN2rHDb8UO8gnYo5DX4RcFkQZ04WrGicoZlCJ5Moo/Ux4:/IDb8UZdo7pZGlCAt/US
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ca4219bde5c4f0edba1acacfafaf15b5aca78682279fb903a8085f6431f4c98.exe"C:\Users\Admin\AppData\Local\Temp\4ca4219bde5c4f0edba1acacfafaf15b5aca78682279fb903a8085f6431f4c98.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.2MB
MD52e73f90170a9779ae99e64c1e9e388df
SHA14f279e733095d905b94036468ad0712df504cb67
SHA25615a52cad13c2736a4a6a91e03cc69d6e59faddb67b56a609b7338d2b8c2a1c38
SHA512a680ade57428018f2a61296b656cd4f649709898c47afb447b0193534916e935aed9e01cbe996dbc384a7eb9bb99cf35e7161f086b920c84e52fcce00bf65976
-
Filesize
7.4MB
-
Filesize
2.3MB
-
Filesize
7.4MB
-
Filesize
7.4MB