Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
43s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/08/2024, 17:51
General
-
Target
To.The.Core/ToTheCore/ToTheCore.exe
-
Size
638KB
-
MD5
c6ed4713cba59a382ce512f0ed6b8805
-
SHA1
3857392f8ca007ae3136798dfb1de8ebe7b3a6fb
-
SHA256
95b99bc95bc58ffacf172a2404af1f74f74495f3e3765b982feb81075e2805e0
-
SHA512
ab876bbc1c44ae0b4e56433dc3b911512739ec1d666f8f2c8c1ccf11822b0ce9fa5f115c3495d5b0d9443f54993504471faa9cf2feca9cb75ec213551bf208e9
-
SSDEEP
1536:4C79gXAX271lcBzqEY2lkCswVxYDXosWkd09dlPaUGXk3+:tgXpJozm2lkCsuYDbM9Z73+
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\ToTheCore.exe"C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\ToTheCore.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\To.The.Core\ToTheCore\UnityCrashHandler64.exe" --attach 2484 22945609195522⤵
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x524 0x5141⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB