Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1795s
  • max time network
    1503s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14/07/2024, 10:08

General

  • Target

    ZenStudio.exe

  • Size

    19.6MB

  • MD5

    1fae469528fcc28ec48eb939b39f8a69

  • SHA1

    21f3642dbc8a5b7bd60cd285490f119aacdaa1a8

  • SHA256

    49e2e48406ae2b43df1e04c20c2fd13b9b25d7d16eb07bfe268f471ee755208c

  • SHA512

    16eb03db6c71770be6b142949f1eaee6ffd5839543d781b8870455cde089db643538c3ed12c2e03da43ec1e4a71ed0454343e23915a2ead9dcb0ff09432f17c1

  • SSDEEP

    393216:vM13RE6vuMqY6WIm9FzFfKTIX8g2JnniEMbvJBvoFzENUZM2Ez05Ts:vM13BmS7FYniEGRliNFE8s

Score
1/10

Malware Config

Signatures

  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ZenStudio.exe
    "C:\Users\Admin\AppData\Local\Temp\ZenStudio.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3136-0-0x000000007510E000-0x000000007510F000-memory.dmp

    Filesize

    4KB

  • memory/3136-1-0x0000000000670000-0x0000000001A06000-memory.dmp

    Filesize

    19.6MB

  • memory/3136-2-0x0000000075100000-0x00000000758B1000-memory.dmp

    Filesize

    7.7MB

  • memory/3136-3-0x000000000E190000-0x000000000F328000-memory.dmp

    Filesize

    17.6MB

  • memory/3136-4-0x0000000006820000-0x0000000006932000-memory.dmp

    Filesize

    1.1MB

  • memory/3136-5-0x0000000006580000-0x00000000065E6000-memory.dmp

    Filesize

    408KB

  • memory/3136-6-0x000000000F810000-0x000000000F866000-memory.dmp

    Filesize

    344KB

  • memory/3136-7-0x00000000100A0000-0x00000000100BC000-memory.dmp

    Filesize

    112KB

  • memory/3136-8-0x00000000100C0000-0x00000000100EA000-memory.dmp

    Filesize

    168KB

  • memory/3136-14-0x0000000006A00000-0x0000000006A0E000-memory.dmp

    Filesize

    56KB

  • memory/3136-18-0x0000000006EF0000-0x0000000006F00000-memory.dmp

    Filesize

    64KB

  • memory/3136-17-0x0000000006EC0000-0x0000000006EF2000-memory.dmp

    Filesize

    200KB

  • memory/3136-19-0x0000000075100000-0x00000000758B1000-memory.dmp

    Filesize

    7.7MB

  • memory/3136-20-0x00000000076B0000-0x00000000076B8000-memory.dmp

    Filesize

    32KB

  • memory/3136-21-0x0000000007720000-0x0000000007758000-memory.dmp

    Filesize

    224KB

  • memory/3136-22-0x00000000076F0000-0x00000000076FE000-memory.dmp

    Filesize

    56KB

  • memory/3136-23-0x00000000092B0000-0x0000000009856000-memory.dmp

    Filesize

    5.6MB

  • memory/3136-24-0x0000000007840000-0x00000000078D2000-memory.dmp

    Filesize

    584KB

  • memory/3136-25-0x0000000075100000-0x00000000758B1000-memory.dmp

    Filesize

    7.7MB

  • memory/3136-26-0x0000000008D00000-0x0000000009060000-memory.dmp

    Filesize

    3.4MB

  • memory/3136-27-0x0000000009860000-0x0000000009B5E000-memory.dmp

    Filesize

    3.0MB

  • memory/3136-28-0x00000000078E0000-0x00000000078E8000-memory.dmp

    Filesize

    32KB

  • memory/3136-29-0x0000000007910000-0x0000000007986000-memory.dmp

    Filesize

    472KB

  • memory/3136-30-0x000000000D9A0000-0x000000000D9A8000-memory.dmp

    Filesize

    32KB

  • memory/3136-31-0x000000007510E000-0x000000007510F000-memory.dmp

    Filesize

    4KB

  • memory/3136-32-0x0000000075100000-0x00000000758B1000-memory.dmp

    Filesize

    7.7MB

  • memory/3136-33-0x0000000075100000-0x00000000758B1000-memory.dmp

    Filesize

    7.7MB

  • memory/3136-34-0x0000000075100000-0x00000000758B1000-memory.dmp

    Filesize

    7.7MB