Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250129-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/01/2025, 13:46

General

  • Target

    9e81f2dc97c7794a7303619fa8b4363d04abf389f0c2b418520d7b0b2668e50c.exe

  • Size

    1.6MB

  • MD5

    14e8176a22e95d5d564a81bcf6b1e12d

  • SHA1

    2df2be325aeafd171010729583aa5116938d5e5f

  • SHA256

    9e81f2dc97c7794a7303619fa8b4363d04abf389f0c2b418520d7b0b2668e50c

  • SHA512

    eaffa6dd7609e328b7d53c57d7be108e3529080049546403a8f240a628fc312f7247899125f26f3011b4c74b846734e579d0b26bc27d2c4b2d61ecc367961b57

  • SSDEEP

    24576:KHfTuC9i/EAVw5MarrOE8Q78D03McY04WzDSOcxMbJ7d:Kqh/9u6aGQgD0ccYKtcxMV7d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9e81f2dc97c7794a7303619fa8b4363d04abf389f0c2b418520d7b0b2668e50c.exe
    "C:\Users\Admin\AppData\Local\Temp\9e81f2dc97c7794a7303619fa8b4363d04abf389f0c2b418520d7b0b2668e50c.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1212-0-0x00007FFF63A83000-0x00007FFF63A85000-memory.dmp

    Filesize

    8KB

  • memory/1212-1-0x00000255E4980000-0x00000255E49BE000-memory.dmp

    Filesize

    248KB

  • memory/1212-2-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-3-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-4-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-19-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-20-0x00007FFF63A83000-0x00007FFF63A85000-memory.dmp

    Filesize

    8KB

  • memory/1212-21-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-22-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-23-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB

  • memory/1212-24-0x00007FFF63A80000-0x00007FFF64541000-memory.dmp

    Filesize

    10.8MB