Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    100s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/03/2025, 06:15

General

  • Target

    b4eca0b7629d60f6cf396e664ca50add98b7376955d993c98d1399bab2da9ae1.exe

  • Size

    1.7MB

  • MD5

    5b07b7f9077f6ad7da2e4ecdbded266d

  • SHA1

    2d9a86ee203bf5c07e7a8d523f38d72df15eea73

  • SHA256

    b4eca0b7629d60f6cf396e664ca50add98b7376955d993c98d1399bab2da9ae1

  • SHA512

    acc55be262e801a42d9bed0806e27ff555f86acd699831e115918a982316b6fb5feb46dd321c8305784d353a3a999b86dfb97f7142ccfab14e3d60b4b198baf6

  • SSDEEP

    49152:mAjys7tNQJ/W2noaITYbNbNWo4kSH3OqtwI+mro:xjysHj8IT4bNJFY3Oqt

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4eca0b7629d60f6cf396e664ca50add98b7376955d993c98d1399bab2da9ae1.exe
    "C:\Users\Admin\AppData\Local\Temp\b4eca0b7629d60f6cf396e664ca50add98b7376955d993c98d1399bab2da9ae1.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:1552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1552-0-0x00007FFBEDDE3000-0x00007FFBEDDE5000-memory.dmp

    Filesize

    8KB

  • memory/1552-1-0x00000231A1A20000-0x00000231A1BD4000-memory.dmp

    Filesize

    1.7MB

  • memory/1552-2-0x00000231A1F90000-0x00000231A1FA2000-memory.dmp

    Filesize

    72KB

  • memory/1552-3-0x00000231BC3E0000-0x00000231BC5F4000-memory.dmp

    Filesize

    2.1MB

  • memory/1552-4-0x00007FFBEDDE0000-0x00007FFBEE8A1000-memory.dmp

    Filesize

    10.8MB

  • memory/1552-5-0x00000231BC6F0000-0x00000231BC712000-memory.dmp

    Filesize

    136KB

  • memory/1552-7-0x00000231BEEC0000-0x00000231BEEFC000-memory.dmp

    Filesize

    240KB

  • memory/1552-8-0x00007FFBEDDE0000-0x00007FFBEE8A1000-memory.dmp

    Filesize

    10.8MB

  • memory/1552-9-0x00007FFBEDDE3000-0x00007FFBEDDE5000-memory.dmp

    Filesize

    8KB

  • memory/1552-10-0x00007FFBEDDE0000-0x00007FFBEE8A1000-memory.dmp

    Filesize

    10.8MB

  • memory/1552-11-0x00007FFBEDDE0000-0x00007FFBEE8A1000-memory.dmp

    Filesize

    10.8MB

  • memory/1552-12-0x00007FFBEDDE0000-0x00007FFBEE8A1000-memory.dmp

    Filesize

    10.8MB