Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/07/2024, 02:23

General

  • Target

    CCheckerv1.1_270322115345/CCheckerv1.1/CCheckerv1.1.exe

  • Size

    359.3MB

  • MD5

    9749f2304724744c2aa9c5aa2c6d72c2

  • SHA1

    09b4fdf8df328a427411b418c3f9d6ff99bfab83

  • SHA256

    6ac4e317c52d4c25001034ec182e952653ce0bd32adf38d7e35d603a892d808c

  • SHA512

    65cd8a797e376c07f880dae53b4e0a18cd71e4b310608a93e925b7dae0480eb6ce1b85f68e3d4e8c5b58c1ba165362b7587135ed9feabc080b7d1f7148ed1fae

  • SSDEEP

    98304:KoRPh5rvXWAtX8XuKIzaPPG1XQfgKsp0Z345qh//Z/YbutPSs:pFvXWaXPd8G1Afgv+Z3B/0up

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CCheckerv1.1_270322115345\CCheckerv1.1\CCheckerv1.1.exe
    "C:\Users\Admin\AppData\Local\Temp\CCheckerv1.1_270322115345\CCheckerv1.1\CCheckerv1.1.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4964-0-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-1-0x0000000002B00000-0x0000000002B46000-memory.dmp

    Filesize

    280KB

  • memory/4964-4-0x00000000029F0000-0x00000000029F1000-memory.dmp

    Filesize

    4KB

  • memory/4964-7-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-6-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-3-0x0000000002B00000-0x0000000002B46000-memory.dmp

    Filesize

    280KB

  • memory/4964-2-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-5-0x0000000000812000-0x0000000000850000-memory.dmp

    Filesize

    248KB

  • memory/4964-8-0x0000000075BB0000-0x0000000075DC5000-memory.dmp

    Filesize

    2.1MB

  • memory/4964-9-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-10-0x0000000075920000-0x0000000075BA1000-memory.dmp

    Filesize

    2.5MB

  • memory/4964-11-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-12-0x00000000762F0000-0x00000000763D3000-memory.dmp

    Filesize

    908KB

  • memory/4964-14-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-15-0x0000000072AE0000-0x0000000072B69000-memory.dmp

    Filesize

    548KB

  • memory/4964-13-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-16-0x0000000076520000-0x0000000076AD3000-memory.dmp

    Filesize

    5.7MB

  • memory/4964-17-0x0000000006250000-0x0000000006868000-memory.dmp

    Filesize

    6.1MB

  • memory/4964-18-0x0000000006190000-0x00000000061A2000-memory.dmp

    Filesize

    72KB

  • memory/4964-20-0x0000000007BE0000-0x0000000007CEA000-memory.dmp

    Filesize

    1.0MB

  • memory/4964-21-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-19-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-22-0x0000000006200000-0x000000000623C000-memory.dmp

    Filesize

    240KB

  • memory/4964-23-0x0000000007CF0000-0x0000000007D3C000-memory.dmp

    Filesize

    304KB

  • memory/4964-26-0x0000000077000000-0x0000000077024000-memory.dmp

    Filesize

    144KB

  • memory/4964-28-0x0000000076AE0000-0x0000000076C00000-memory.dmp

    Filesize

    1.1MB

  • memory/4964-29-0x0000000075620000-0x00000000756DF000-memory.dmp

    Filesize

    764KB

  • memory/4964-27-0x0000000076C00000-0x0000000076C7B000-memory.dmp

    Filesize

    492KB

  • memory/4964-25-0x0000000075BB0000-0x0000000075DC5000-memory.dmp

    Filesize

    2.1MB

  • memory/4964-24-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-33-0x0000000075920000-0x0000000075BA1000-memory.dmp

    Filesize

    2.5MB

  • memory/4964-32-0x0000000075050000-0x00000000750A2000-memory.dmp

    Filesize

    328KB

  • memory/4964-30-0x0000000077110000-0x00000000771CF000-memory.dmp

    Filesize

    764KB

  • memory/4964-37-0x0000000074810000-0x000000007481F000-memory.dmp

    Filesize

    60KB

  • memory/4964-38-0x0000000074800000-0x0000000074808000-memory.dmp

    Filesize

    32KB

  • memory/4964-36-0x0000000074820000-0x00000000748AD000-memory.dmp

    Filesize

    564KB

  • memory/4964-35-0x0000000077230000-0x0000000077275000-memory.dmp

    Filesize

    276KB

  • memory/4964-41-0x0000000073F80000-0x000000007402B000-memory.dmp

    Filesize

    684KB

  • memory/4964-45-0x0000000076440000-0x0000000076459000-memory.dmp

    Filesize

    100KB

  • memory/4964-46-0x000000006F1A0000-0x000000006F3B0000-memory.dmp

    Filesize

    2.1MB

  • memory/4964-44-0x0000000076510000-0x0000000076516000-memory.dmp

    Filesize

    24KB

  • memory/4964-43-0x0000000072AE0000-0x0000000072B69000-memory.dmp

    Filesize

    548KB

  • memory/4964-39-0x0000000074050000-0x0000000074800000-memory.dmp

    Filesize

    7.7MB

  • memory/4964-40-0x0000000074030000-0x0000000074044000-memory.dmp

    Filesize

    80KB

  • memory/4964-34-0x0000000076C80000-0x0000000076D16000-memory.dmp

    Filesize

    600KB

  • memory/4964-47-0x000000006F010000-0x000000006F19D000-memory.dmp

    Filesize

    1.6MB

  • memory/4964-48-0x000000006EFA0000-0x000000006F00B000-memory.dmp

    Filesize

    428KB

  • memory/4964-49-0x000000006EEB0000-0x000000006EF93000-memory.dmp

    Filesize

    908KB

  • memory/4964-50-0x0000000075770000-0x00000000757D3000-memory.dmp

    Filesize

    396KB

  • memory/4964-51-0x000000006DBF0000-0x000000006DCF5000-memory.dmp

    Filesize

    1.0MB

  • memory/4964-52-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-62-0x0000000075920000-0x0000000075BA1000-memory.dmp

    Filesize

    2.5MB

  • memory/4964-68-0x0000000074050000-0x0000000074800000-memory.dmp

    Filesize

    7.7MB

  • memory/4964-81-0x0000000002B00000-0x0000000002B46000-memory.dmp

    Filesize

    280KB

  • memory/4964-53-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-82-0x0000000000812000-0x0000000000850000-memory.dmp

    Filesize

    248KB

  • memory/4964-83-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB

  • memory/4964-112-0x0000000000810000-0x0000000000B8D000-memory.dmp

    Filesize

    3.5MB