Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

01/03/2025, 18:58

250301-xmhhrayp15 10

01/03/2025, 18:55

250301-xkqrcaypx7 10

Analysis

  • max time kernel
    147s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2024, 19:31

General

  • Target

    fb5d110ced698b06c6cb8c7112792a2d37c579dcd9bde808310cb8dc88e16d9c.exe

  • Size

    19KB

  • MD5

    6029c37a32d7e4951449e197d4850213

  • SHA1

    6ed7bb726b1e04d6858c084bc9bf475a13b77c95

  • SHA256

    fb5d110ced698b06c6cb8c7112792a2d37c579dcd9bde808310cb8dc88e16d9c

  • SHA512

    bf3639710e259aa38d0cd028071408bdd41c01ee1bd0ea70a16ada78b848c63886854ed40407242e3a68fd9b5444fce2e6ddc050e0c8a2f578b00f43b6c52b6f

  • SSDEEP

    384:EB8JbJPKd1Bf3rNeD9k4NcKlb5sCSvyP5CtrCzYcHe+Z:EBCNPKd155ulNzxoUzYcHe+Z

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fb5d110ced698b06c6cb8c7112792a2d37c579dcd9bde808310cb8dc88e16d9c.exe
    "C:\Users\Admin\AppData\Local\Temp\fb5d110ced698b06c6cb8c7112792a2d37c579dcd9bde808310cb8dc88e16d9c.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2512-0-0x00007FFEC6EE5000-0x00007FFEC6EE6000-memory.dmp

    Filesize

    4KB

  • memory/2512-1-0x00007FFEC6C30000-0x00007FFEC75D1000-memory.dmp

    Filesize

    9.6MB

  • memory/2512-2-0x000000001B7E0000-0x000000001BCAE000-memory.dmp

    Filesize

    4.8MB

  • memory/2512-3-0x000000001BD60000-0x000000001BE06000-memory.dmp

    Filesize

    664KB

  • memory/2512-4-0x000000001BED0000-0x000000001BF32000-memory.dmp

    Filesize

    392KB

  • memory/2512-5-0x00007FFEC6C30000-0x00007FFEC75D1000-memory.dmp

    Filesize

    9.6MB

  • memory/2512-6-0x00007FFEC6EE5000-0x00007FFEC6EE6000-memory.dmp

    Filesize

    4KB

  • memory/2512-7-0x00007FFEC6C30000-0x00007FFEC75D1000-memory.dmp

    Filesize

    9.6MB