Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/01/2025, 17:46

General

  • Target

    e2ad7a8baedbe11765ebab279fac5846e68aa4749d1d769eeddb7cf6a2150d87.exe

  • Size

    1.6MB

  • MD5

    f0ce9cd9a2551f359a1e03f323a44c52

  • SHA1

    596265f2d141d8eb785cfccbe3906dc3f98ce109

  • SHA256

    e2ad7a8baedbe11765ebab279fac5846e68aa4749d1d769eeddb7cf6a2150d87

  • SHA512

    dbfd0a48e951d87ebd4ed1661bc9110f9cbbdf0de4174a0d40fc4f21e883a374e2ca9bff30954197bbc4e0e9bafdefc1a1f27123758407ca1a1d29cd9493fcc5

  • SSDEEP

    49152:a72LIF0ZXXJx75R4hr+dz5ErX9kcJIEXT5XVlE1R:WxqHf7P6rqz5u9kS9D5Y1R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e2ad7a8baedbe11765ebab279fac5846e68aa4749d1d769eeddb7cf6a2150d87.exe
    "C:\Users\Admin\AppData\Local\Temp\e2ad7a8baedbe11765ebab279fac5846e68aa4749d1d769eeddb7cf6a2150d87.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1912-0-0x00007FFA0AAB3000-0x00007FFA0AAB5000-memory.dmp

    Filesize

    8KB

  • memory/1912-1-0x0000024B55DF0000-0x0000024B55E24000-memory.dmp

    Filesize

    208KB

  • memory/1912-2-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-3-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-4-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-5-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-6-0x0000024B74130000-0x0000024B74138000-memory.dmp

    Filesize

    32KB

  • memory/1912-7-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-9-0x0000024B74180000-0x0000024B7418E000-memory.dmp

    Filesize

    56KB

  • memory/1912-8-0x0000024B741B0000-0x0000024B741E8000-memory.dmp

    Filesize

    224KB

  • memory/1912-22-0x00007FFA0AAB3000-0x00007FFA0AAB5000-memory.dmp

    Filesize

    8KB

  • memory/1912-23-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-24-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB

  • memory/1912-25-0x00007FFA0AAB0000-0x00007FFA0B571000-memory.dmp

    Filesize

    10.8MB