Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    110s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2024, 16:14

General

  • Target

    aed039f00f83fbb309d568e2567172ac77a7524ecc79c6a1d9ecbb137dbf862eN.exe

  • Size

    79KB

  • MD5

    81ead4057adc1e6b91c978c71e5d32c0

  • SHA1

    5952f48e72bcc106c0ef616d8cd3693c1a3093bd

  • SHA256

    aed039f00f83fbb309d568e2567172ac77a7524ecc79c6a1d9ecbb137dbf862e

  • SHA512

    46506a8963d772c813c65db3fb2eccc024c857fcf3976f54fdf8e1006910ea8b4ba51e1ec95ec3885e0954d2f772e01ed5d397340cb48e161aef19e61a26902b

  • SSDEEP

    1536:XZNxZ+EZida6ziR3mCNv6Pwkq1QKxeXT8hkrJ/zzzzzzzzzzzzzzzzzzzz1iQlTz:XZNz+Eka1R3N6PwkuDxYT8y9EGNsUos

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\aed039f00f83fbb309d568e2567172ac77a7524ecc79c6a1d9ecbb137dbf862eN.exe
    "C:\Users\Admin\AppData\Local\Temp\aed039f00f83fbb309d568e2567172ac77a7524ecc79c6a1d9ecbb137dbf862eN.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/656-1-0x00007FFE6EBB0000-0x00007FFE6EDA5000-memory.dmp

    Filesize

    2.0MB

  • memory/656-0-0x0000000000E50000-0x0000000000E6A000-memory.dmp

    Filesize

    104KB

  • memory/656-2-0x00007FFE6EBB0000-0x00007FFE6EDA5000-memory.dmp

    Filesize

    2.0MB

  • memory/656-6-0x00007FFE6EBB0000-0x00007FFE6EDA5000-memory.dmp

    Filesize

    2.0MB

  • memory/656-7-0x00007FFE6EBB0000-0x00007FFE6EDA5000-memory.dmp

    Filesize

    2.0MB

  • memory/656-8-0x00007FFE6EBB0000-0x00007FFE6EDA5000-memory.dmp

    Filesize

    2.0MB

  • memory/656-9-0x000000001DFC0000-0x000000001E12A000-memory.dmp

    Filesize

    1.4MB