Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

Install.exe

windows7-x64

1

Install.exe

windows10-1703-x64

1

Analysis

  • max time kernel
    49s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    20/09/2022, 17:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Install.exe

  • Size

    98KB

  • MD5

    9f5c8d2915dd6e4ec843132397fd1581

  • SHA1

    ef4a49acb9b7b62d187b967fe67061d54245b54d

  • SHA256

    c582aa0fd54e4e44ec4a1d36e6dda2c68e8ecb0599506f3214db5bb16c00efbe

  • SHA512

    c845c8ad33c09dac4e94b55ab3413f850a6d4459eee42c70d77e3d6b21f3e6c87abdc8428dfdac59668b9cedc76e1d3f07fdd1f4741c6ea1963d634ab3076662

  • SSDEEP

    768:B7EcF20oe30oqrDm7CMGTQ2e3dM9MXWT+Dk4P9E5W4gLm8pOXy:B7/5Eoyzk6yGkkoZaKX

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Install.exe
    "C:\Users\Admin\AppData\Local\Temp\Install.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1992-54-0x00000000013A0000-0x00000000013BE000-memory.dmp

    Filesize

    120KB

    Download

  • memory/1992-55-0x00000000757A1000-0x00000000757A3000-memory.dmp

    Filesize

    8KB

    Download