Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
12/09/2024, 13:28
Static task
static1
Behavioral task
behavioral1
Sample
e18a549b10943645361372ebb7871fd23a0608a84ae0405ff1be946ab8bdc1ee.msc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e18a549b10943645361372ebb7871fd23a0608a84ae0405ff1be946ab8bdc1ee.msc
Resource
win10v2004-20240802-en
General
-
Target
e18a549b10943645361372ebb7871fd23a0608a84ae0405ff1be946ab8bdc1ee.msc
-
Size
141KB
-
MD5
e0addce97ee521c9ac4f53ee17a05bd5
-
SHA1
2f8dd03b0433fa5d511ab80546a95037a1eb178d
-
SHA256
e18a549b10943645361372ebb7871fd23a0608a84ae0405ff1be946ab8bdc1ee
-
SHA512
d396b8b2d86d7331cac2e183b869224905a3ff7cf33300cd60dd8e5e55bf31d6170322624ee3ae18ff41d647c1e65177252654a64ff5fe5c74778f17e6ecfcd4
-
SSDEEP
384:ll04OzLxJj55N4Z6TAbcJNeoJkWL3YhABOD8hE72BZaY4eI02N1iaFxAMNHvQ1Xy:ELxJZmbCNeoJjC2BZaY4e12y4v2g3
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 10 IoCs
description pid Process Token: 33 1584 mmc.exe Token: SeIncBasePriorityPrivilege 1584 mmc.exe Token: 33 1584 mmc.exe Token: SeIncBasePriorityPrivilege 1584 mmc.exe Token: 33 1584 mmc.exe Token: SeIncBasePriorityPrivilege 1584 mmc.exe Token: 33 1584 mmc.exe Token: SeIncBasePriorityPrivilege 1584 mmc.exe Token: 33 1584 mmc.exe Token: SeIncBasePriorityPrivilege 1584 mmc.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1584 mmc.exe 1584 mmc.exe