Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

53a2d03b45...3f.exe

windows7-x64

8

53a2d03b45...3f.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    39s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2022, 16:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f.exe

  • Size

    54KB

  • MD5

    50e53cb632227fcdac63a9691a538d7c

  • SHA1

    7e6310c34c8b2b2e5bac58914b7273efe04ffbae

  • SHA256

    53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f

  • SHA512

    8b5ab4764c13d4edf72a218f3a14399c857f1fa8a0793d55665e292e0b42deabe4b85e5b6442623d527c7b09e70ae6004a88f0d1e79dc0dbde59fccef71e2398

  • SSDEEP

    1536:qJ0CFdOpROE4qb9cIbzB8qhPgZ64/vR07ZwIOiU:q2pGkrt8qhPFivC7iI/U

Score
8/10
upx

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f.exe
    "C:\Users\Admin\AppData\Local\Temp\53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f.exe"
    1⤵
    • Drops file in Drivers directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1248-54-0x0000000075351000-0x0000000075353000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1248-55-0x0000000000400000-0x0000000000425000-memory.dmp

    Filesize

    148KB

    Download