Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09/08/2024, 15:36
General
-
Target
wfilmorav13648450-zmco.exe
-
Size
38.8MB
-
MD5
397f08699f2c80ea84137239c773c940
-
SHA1
1313074277ff49f968ccdb02745a4eb75ef96631
-
SHA256
f3b233a30c840719c65c90cc68c8cb15b5a20351f0db1196066d39f115f48c93
-
SHA512
f571e25704d9021fb2ee0c0752b0efb8b574a32bb2ee020ef3f8eac7d4908fba25b9e9eeaac08c0d5d2a95c0808a4a54d3b1cc1773167bd8b6237f6869ee7d98
-
SSDEEP
786432:IYthd5eOgclTZ2d/+qkN4G7+VS3KWgj76dZbJ1O83wZLaKTApb:htNe7yTZSYGGKWgjmdZFgqw6b
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: LoadsDriver 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\wfilmorav13648450-zmco.exe"C:\Users\Admin\AppData\Local\Temp\wfilmorav13648450-zmco.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x40c 0x1441⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
40.8MB
-
Filesize
40.8MB
-
Filesize
40.8MB
-
Filesize
40.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
40.8MB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
40.8MB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
40.8MB
-
Filesize
76KB
-
Filesize
40.8MB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
384KB
-
Filesize
40.8MB