Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29/06/2024, 21:07
Static task
static1
Behavioral task
behavioral1
Sample
AetherEye.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
Guna.UI2.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Memory.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
config.ini
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
updater.exe
Resource
win10v2004-20240611-en
General
-
Target
AetherEye.exe
-
Size
11.5MB
-
MD5
3dd8160c066421854b393f3c696eb9ae
-
SHA1
fe206fd3d56583543056db80ce582ac656fb4e0a
-
SHA256
8c0391f7033f0dbbcce3def6ebd442d4d83fd16851ddf78e99d11d90046a7d0d
-
SHA512
5088d8615d922a521939acc7a894bf0f62232890a7b9d176b7315b00bf04339bc2b9ef44bd96903c34bb92bfb1f59f5d0d994e45e7fa2dbf151f906f7e536ccd
-
SSDEEP
196608:zwouFDqljn3RNqx9TqclNFduidn61V7OUSSoi5jPAN/XPur7qgKGya0qx:zNuFDqln3Ry7Z+VaUSIhAtuPqgKG+M
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 1328 AetherEye.exe 1328 AetherEye.exe 1328 AetherEye.exe 1328 AetherEye.exe 1328 AetherEye.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1328 AetherEye.exe