Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
15/07/2024, 14:28
General
-
Target
b2c2b31e042879ac75c7a4a3d4a475256bca0658bb1ec5c291febaee44d31bef.exe
-
Size
4.0MB
-
MD5
df6cf5831832ebf5bb9b6cdd1f2549d8
-
SHA1
057f92ef56f777623a1f613bbaa3cd15e1d5f808
-
SHA256
b2c2b31e042879ac75c7a4a3d4a475256bca0658bb1ec5c291febaee44d31bef
-
SHA512
f5ed8a6ebdd8537d631398c6e666c8e1297873769e72a55dc53e412b4391fc95218640b65d4fde8fb6cdcfbd8fb3b762f3db2f2b034094c0736613a29c231245
-
SSDEEP
49152:KcN4biAC+v6saSeF5/u9jZ429UyFmcGRT1MuPAUXBHfVUfVIQL6bkzmJwzP2+KWU:zR/wU1h1hR3
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2c2b31e042879ac75c7a4a3d4a475256bca0658bb1ec5c291febaee44d31bef.exe"C:\Users\Admin\AppData\Local\Temp\b2c2b31e042879ac75c7a4a3d4a475256bca0658bb1ec5c291febaee44d31bef.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\AssistantFiles\update.exeC:\AssistantFiles\update.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB
MD5df6cf5831832ebf5bb9b6cdd1f2549d8
SHA1057f92ef56f777623a1f613bbaa3cd15e1d5f808
SHA256b2c2b31e042879ac75c7a4a3d4a475256bca0658bb1ec5c291febaee44d31bef
SHA512f5ed8a6ebdd8537d631398c6e666c8e1297873769e72a55dc53e412b4391fc95218640b65d4fde8fb6cdcfbd8fb3b762f3db2f2b034094c0736613a29c231245
-
Filesize
4.1MB
-
Filesize
4.1MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
22.2MB
-
Filesize
5.9MB
-
Filesize
5.9MB
-
Filesize
5.9MB