Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/12/2024, 11:46

General

  • Target

    cad51c2ccdea145e70b041891e511917.exe

  • Size

    726KB

  • MD5

    cad51c2ccdea145e70b041891e511917

  • SHA1

    5e6b288348a790a91a27c434ee1eaebadacbe12c

  • SHA256

    55c0166f790956e3be24cd3ee78c69ebab031ed62bfbda058b3a653c1a75b518

  • SHA512

    cb498dcf9b526c91547f4e1baa5a3c9bd1655a1c30661058e40aaa8e28b91aa0a335fc08cfd30617bd4c64a922cf7adf917cea3a5da6cedf82291bee1e7dc25d

  • SSDEEP

    12288:6D6YDzqx5XBNt1BrivR0V4TBjgYxs1wl206gBawFV2ceSb0BQ/GfM/4QiAzojgJI:6D6Y3qx51NbXA

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\cad51c2ccdea145e70b041891e511917.exe
    "C:\Users\Admin\AppData\Local\Temp\cad51c2ccdea145e70b041891e511917.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1460

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1460-0-0x00007FFF28EB3000-0x00007FFF28EB5000-memory.dmp

    Filesize

    8KB

  • memory/1460-1-0x0000000000430000-0x00000000004EC000-memory.dmp

    Filesize

    752KB

  • memory/1460-2-0x00007FFF28EB0000-0x00007FFF29971000-memory.dmp

    Filesize

    10.8MB

  • memory/1460-3-0x000000001BAB0000-0x000000001BBBA000-memory.dmp

    Filesize

    1.0MB

  • memory/1460-4-0x00000000026B0000-0x00000000026C2000-memory.dmp

    Filesize

    72KB

  • memory/1460-5-0x000000001B100000-0x000000001B13C000-memory.dmp

    Filesize

    240KB

  • memory/1460-6-0x000000001B2D0000-0x000000001B346000-memory.dmp

    Filesize

    472KB

  • memory/1460-7-0x00000000026F0000-0x000000000270E000-memory.dmp

    Filesize

    120KB

  • memory/1460-8-0x00007FFF28EB0000-0x00007FFF29971000-memory.dmp

    Filesize

    10.8MB

  • memory/1460-9-0x000000001C690000-0x000000001C852000-memory.dmp

    Filesize

    1.8MB

  • memory/1460-10-0x000000001D210000-0x000000001D738000-memory.dmp

    Filesize

    5.2MB

  • memory/1460-11-0x00007FFF28EB0000-0x00007FFF29971000-memory.dmp

    Filesize

    10.8MB

  • memory/1460-12-0x00007FFF28EB0000-0x00007FFF29971000-memory.dmp

    Filesize

    10.8MB

  • memory/1460-13-0x00007FFF28EB3000-0x00007FFF28EB5000-memory.dmp

    Filesize

    8KB

  • memory/1460-14-0x00007FFF28EB0000-0x00007FFF29971000-memory.dmp

    Filesize

    10.8MB

  • memory/1460-16-0x00007FFF28EB0000-0x00007FFF29971000-memory.dmp

    Filesize

    10.8MB