Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    51s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/06/2024, 21:07

General

  • Target

    AetherEye.exe

  • Size

    11.5MB

  • MD5

    3dd8160c066421854b393f3c696eb9ae

  • SHA1

    fe206fd3d56583543056db80ce582ac656fb4e0a

  • SHA256

    8c0391f7033f0dbbcce3def6ebd442d4d83fd16851ddf78e99d11d90046a7d0d

  • SHA512

    5088d8615d922a521939acc7a894bf0f62232890a7b9d176b7315b00bf04339bc2b9ef44bd96903c34bb92bfb1f59f5d0d994e45e7fa2dbf151f906f7e536ccd

  • SSDEEP

    196608:zwouFDqljn3RNqx9TqclNFduidn61V7OUSSoi5jPAN/XPur7qgKGya0qx:zNuFDqln3Ry7Z+VaUSIhAtuPqgKG+M

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AetherEye.exe
    "C:\Users\Admin\AppData\Local\Temp\AetherEye.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1328-0-0x00000000746FE000-0x00000000746FF000-memory.dmp

    Filesize

    4KB

  • memory/1328-1-0x0000000000910000-0x0000000002912000-memory.dmp

    Filesize

    32.0MB

  • memory/1328-2-0x0000000006D60000-0x0000000006D61000-memory.dmp

    Filesize

    4KB

  • memory/1328-3-0x00000000746F0000-0x0000000074EA0000-memory.dmp

    Filesize

    7.7MB

  • memory/1328-5-0x0000000007600000-0x0000000007692000-memory.dmp

    Filesize

    584KB

  • memory/1328-4-0x0000000007BB0000-0x0000000008154000-memory.dmp

    Filesize

    5.6MB

  • memory/1328-6-0x00000000078A0000-0x0000000007AA0000-memory.dmp

    Filesize

    2.0MB

  • memory/1328-7-0x0000000007AA0000-0x0000000007B3C000-memory.dmp

    Filesize

    624KB

  • memory/1328-9-0x00000000073D0000-0x00000000073EA000-memory.dmp

    Filesize

    104KB

  • memory/1328-8-0x00000000073B0000-0x00000000073C2000-memory.dmp

    Filesize

    72KB

  • memory/1328-10-0x0000000007810000-0x0000000007876000-memory.dmp

    Filesize

    408KB

  • memory/1328-11-0x0000000008330000-0x00000000084F2000-memory.dmp

    Filesize

    1.8MB

  • memory/1328-13-0x00000000081C0000-0x0000000008216000-memory.dmp

    Filesize

    344KB

  • memory/1328-12-0x0000000007B60000-0x0000000007B6A000-memory.dmp

    Filesize

    40KB

  • memory/1328-14-0x0000000009A50000-0x000000000A44C000-memory.dmp

    Filesize

    10.0MB

  • memory/1328-15-0x00000000746F0000-0x0000000074EA0000-memory.dmp

    Filesize

    7.7MB

  • memory/1328-16-0x00000000746FE000-0x00000000746FF000-memory.dmp

    Filesize

    4KB

  • memory/1328-18-0x00000000746F0000-0x0000000074EA0000-memory.dmp

    Filesize

    7.7MB