Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    111s
  • max time network
    121s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/08/2024, 14:56

General

  • Target

    1c480acd4b121415f2f39776a41fd950N.exe

  • Size

    625KB

  • MD5

    1c480acd4b121415f2f39776a41fd950

  • SHA1

    7b2a74461ee5e6bccb0bfc646d7229ec19bc9d96

  • SHA256

    1e5b0048b105b6520cc7e1d527c88cfc5b1331d6946c27df0c52faba65d26e0a

  • SHA512

    5fd6714032ae865b204085815bd84568ca03dde1e8cb02a74c765d9eed336b288ef3c4d23f4cdd17ac99d6a9651d2ad59081c81a1291f56f1d7108d7f18e5dcb

  • SSDEEP

    6144:T2F4PZx/qnkVTLs14yofmJx/qnkVTLs14yofHstK9GAEX+GGhdGwGGIGSIWI9Yqa:SyhBqnUyofmJBqnUyofV39YUZ39YU6

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1c480acd4b121415f2f39776a41fd950N.exe
    "C:\Users\Admin\AppData\Local\Temp\1c480acd4b121415f2f39776a41fd950N.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3408-0-0x00007FFCB11E3000-0x00007FFCB11E5000-memory.dmp

    Filesize

    8KB

  • memory/3408-1-0x000001C2BBBF0000-0x000001C2BBC90000-memory.dmp

    Filesize

    640KB

  • memory/3408-2-0x00007FFCB11E0000-0x00007FFCB1CA1000-memory.dmp

    Filesize

    10.8MB

  • memory/3408-3-0x000001C2BC080000-0x000001C2BC08C000-memory.dmp

    Filesize

    48KB

  • memory/3408-4-0x00007FFCB11E0000-0x00007FFCB1CA1000-memory.dmp

    Filesize

    10.8MB

  • memory/3408-5-0x00007FFCB11E3000-0x00007FFCB11E5000-memory.dmp

    Filesize

    8KB

  • memory/3408-6-0x00007FFCB11E0000-0x00007FFCB1CA1000-memory.dmp

    Filesize

    10.8MB