Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14/08/2024, 09:34
General
-
Target
keygen.exe
-
Size
45KB
-
MD5
37a61ea6d443c1824eaba319489fbbfc
-
SHA1
6f3562e702e7d20cca153a0aa324a0c3c9c26380
-
SHA256
df7f2c9138309b32bcb98207bf76e65cd93625d0a00ce1132c1290c9f508244e
-
SHA512
c971d7a89da25ee37bf1e53a15d6ccb7907afa83aa862eccdc6e9d3e0e7f83ab079dab7b595af145bf68641480a5db6a87c8fed44ba6d37c789a4cacd34e3add
-
SSDEEP
768:uqEnvMI+Xa0ksrrtQNcUv9hUKT9A27eqw5L5215atMm0nnv:uqqE+epQWEfA27q52/ybM
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\keygen.exe"C:\Users\Admin\AppData\Local\Temp\keygen.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4c4 0x2f81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB