Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
22/03/2025, 06:08
General
-
Target
1a76abc85db21c92e847aa3562aab0b09c56bdce383b54b6957b78314d4429f9.exe
-
Size
163KB
-
MD5
67adbe1a2a9c36325075585b6a13226c
-
SHA1
efccaa6986654dcd6d002468e60acc0936020611
-
SHA256
1a76abc85db21c92e847aa3562aab0b09c56bdce383b54b6957b78314d4429f9
-
SHA512
ca8866a23bf69cbdd20cf6155b2464b2003a7626f413b4b0a45c752aefe9ce100665066369a22e1ffb1be640502f21714eb53381d1264d2e9cf44898973fdd45
-
SSDEEP
3072:qseWzBQLoX/1X4Z8kTMutu4OZcg0R2l5AOggVjN:7L+Z5MVVZcg62l5AlgV
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a76abc85db21c92e847aa3562aab0b09c56bdce383b54b6957b78314d4429f9.exe"C:\Users\Admin\AppData\Local\Temp\1a76abc85db21c92e847aa3562aab0b09c56bdce383b54b6957b78314d4429f9.exe"1⤵
- Adds Run key to start application
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
392KB
-
Filesize
9.6MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB