Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

tabby-1.0....64.exe

windows11-21h2-x64

5

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

resources/...rop.js

windows11-21h2-x64

3

resources/...dem.js

windows11-21h2-x64

3

resources/...end.js

windows11-21h2-x64

3

resources/...ing.js

windows11-21h2-x64

3

resources/...ing.js

windows11-21h2-x64

3

resources/...ice.js

windows11-21h2-x64

3

resources/...enu.js

windows11-21h2-x64

3

resources/elevate.exe

windows11-21h2-x64

3

resources/...AC.exe

windows11-21h2-x64

1

resources/...nk.bat

windows11-21h2-x64

8

resources/...64.dll

windows11-21h2-x64

1

resources/...86.dll

windows11-21h2-x64

3

resources/...se.vbs

windows11-21h2-x64

1

resources/...64.exe

windows11-21h2-x64

1

resources/...86.exe

windows11-21h2-x64

3

vk_swiftshader.dll

windows11-21h2-x64

1

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

$R0/Uninst...by.exe

windows11-21h2-x64

4

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Analysis

  • max time kernel
    424s
  • max time network
    1160s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    05/09/2024, 18:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    resources/elevate.exe

  • Size

    124KB

  • MD5

    4ad165cad86f4a4fa5a633dd7367f01f

  • SHA1

    473b3f19e9fc2d8ebb6d75cbcc46112ebf5b2817

  • SHA256

    1e9b9e17c13297e32f27fb5244b48e85f7c2932ed88cc1fd45da2a065cbe31c1

  • SHA512

    d2416e54bd28218e828b9ad24ef316ae08d4f70776c6e20245298346ba7126c3b461cf6fa31cf43cd5d141a0a41a5499499967f90ad1fd00958659bd9fdb96f7

  • SSDEEP

    3072:WZbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlO6NemwF:mPrwRhte1XsE1lu

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads