Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/01/2025, 09:46

General

  • Target

    13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe

  • Size

    1.7MB

  • MD5

    3ac08048c345dc419fb1a764c45c7a18

  • SHA1

    314fe6814e53aef6e27ec4f496c80a08fc6b30b9

  • SHA256

    13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b

  • SHA512

    8f2bf3f70c2e1df54cf7eb1b29b298cef9348bde5b6f0849d8a6b82371f87326a9265244ca699bcbc46431b0a056fe16245dee2a3301ce7cd39c3119da5dd3f1

  • SSDEEP

    24576:5W0Wgnam5hmEWkmgcOWsx1eIWWOJQpC2L/FaAHrW5DSVXT5XkIsxyaL:5WtmuEvmgcO1DP62rFaAHrbXT5XkZ1L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe
    "C:\Users\Admin\AppData\Local\Temp\13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2296-0-0x00007FFC72ED3000-0x00007FFC72ED5000-memory.dmp

    Filesize

    8KB

  • memory/2296-1-0x000001EC7E3C0000-0x000001EC7E3F4000-memory.dmp

    Filesize

    208KB

  • memory/2296-2-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-3-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-4-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-5-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-6-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-7-0x000001EC7E3F0000-0x000001EC7E3F8000-memory.dmp

    Filesize

    32KB

  • memory/2296-9-0x000001EC7E400000-0x000001EC7E40E000-memory.dmp

    Filesize

    56KB

  • memory/2296-8-0x000001EC7E8E0000-0x000001EC7E918000-memory.dmp

    Filesize

    224KB

  • memory/2296-22-0x00007FFC72ED3000-0x00007FFC72ED5000-memory.dmp

    Filesize

    8KB

  • memory/2296-23-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-24-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-25-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-26-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB

  • memory/2296-27-0x00007FFC72ED0000-0x00007FFC73991000-memory.dmp

    Filesize

    10.8MB