Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
98s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
19/07/2024, 11:38
General
-
Target
8de63e923d1292152fd11e87bb98fec0N.exe
-
Size
83KB
-
MD5
8de63e923d1292152fd11e87bb98fec0
-
SHA1
b2f55df18e3d2e2993ba05e04b19c199e293975e
-
SHA256
181a280f84c05f20a72477e9fdbe73f08fb2b38b6cc7d33b86e565103b1439c2
-
SHA512
6f3a3a86848f0ce8ee6e2b743ce79ce3404f7ade1087465329a499a0522e36ef83d65320060bb6d64967ca588ab19dd87ce2a52f45bc16cf0c50cc074d8b74b4
-
SSDEEP
1536:LaWLF1kxTnUI4CFPtv6iSJnaGlbVxhoOSQxzG:LaWExTnUTCFPtvanaGlbVxhoOi
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8de63e923d1292152fd11e87bb98fec0N.exe"C:\Users\Admin\AppData\Local\Temp\8de63e923d1292152fd11e87bb98fec0N.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\Winkcvw.exeC:\Windows\SysWOW64\Winkcvw.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD590ca14d99d4108ecade14d388d353142
SHA134186775c6a1a08d737762e71a964234bc70154e
SHA2565216c737aeff835ffbfa3a76c194a1dd384fe58646f21cd65ab161d3f136b389
SHA512481cb4830bd98b90fc68abc96e5c9f9153e280abade723afd3d6f853ce46c17d459fa001a270646163d9c8a44ac0fc1755d6bd8a4be77c40080eee12189dcc06
-
Filesize
596KB
-
Filesize
596KB
-
Filesize
596KB