Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11/10/2024, 22:24
General
-
Target
$PROGRAMFILES/Windows Media Player/jcxb.exe
-
Size
12KB
-
MD5
cac39e1fc84fda5c1179404ea0e7de52
-
SHA1
8f5ece3b85495dc92c7004d36bf7daa56b3bb43b
-
SHA256
f457b697c1b74807da7f840a7a927bad817b03d9a19d9b211d3d2c7d5bb9e0cc
-
SHA512
5227f346bb9eb5a0fac15a700b247f73d7761adfc7190543dd0ac47b0a2882484af705ce03c1fe3da3e2489954e2dcf6add198d0cf6d54b5303a258e3d4a84a3
-
SSDEEP
384:iy5CBZYz3rDIs1jvEoIILAPBjFtwvcXC6ma3:iMgZQbMs1qIQFFNy6ma
Score
5/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\Windows Media Player\jcxb.exe"C:\Users\Admin\AppData\Local\Temp\$PROGRAMFILES\Windows Media Player\jcxb.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB