Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22/03/2025, 06:08
General
-
Target
1be2b92ceabc55905ef2d5a4d28e28f80931887ca1b7aa2557775e09402d36ae.exe
-
Size
231KB
-
MD5
e9f42fb8ff100cbfc5510e317728db6b
-
SHA1
313d570c9f8d9a03c0ed7111e1593ebaaa98c2fc
-
SHA256
1be2b92ceabc55905ef2d5a4d28e28f80931887ca1b7aa2557775e09402d36ae
-
SHA512
24432e606d2d27f19eb398826632a65b183d5169c6a31148575d0ee88dff8a84c95e43eaa7589c8afd6c5bd585bdfa861834bc67b180a6b4898b94b49e2f2171
-
SSDEEP
6144:xloZM3fsXtioRkts/cnnK6cMlDMRA8il92SDe8NhoFGb8e1m+i:DoZ1tlRk83MlDMRA8il92SDe8Nhokg
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Umbral family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1be2b92ceabc55905ef2d5a4d28e28f80931887ca1b7aa2557775e09402d36ae.exe"C:\Users\Admin\AppData\Local\Temp\1be2b92ceabc55905ef2d5a4d28e28f80931887ca1b7aa2557775e09402d36ae.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
256KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB