Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

sample.js

windows7-x64

1

Analysis

  • max time kernel
    53s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2022, 21:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    sample.js

  • Size

    13KB

  • MD5

    a4fd4fdb8213bca13380f3604aefd984

  • SHA1

    615c8d132501a3f23b826ca52d8373419d72e4d6

  • SHA256

    6b1d8fbc784fe3bf4ceec73de8c4eb6f4ff941aaacf3e759caaeac6f72ab6976

  • SHA512

    9ecb1a59a31469cc41400a8ec6245f1ebc633055475e03411b22b0166bb72207d222f14ebb65b01c1f4788ed7f69da792eb46ec0609cf9c0252ea49b09cba8eb

  • SSDEEP

    192:aUwd1GOszoVoOsKRooKw1lNEeGM4GURrHhhbP65F2uhzU2c26vZ:rwmNzoVoOsKOElKeGMVUhHhhbS5RU2Ax

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\sample.js
    1⤵
      PID:780
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:1000
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x4fc
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:340

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1000-54-0x000007FEFBD01000-0x000007FEFBD03000-memory.dmp

        Filesize

        8KB

        Download