Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
127s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
03/10/2022, 04:51
General
-
Target
9aea332d407a458e281fcd59216522c393e3ceec104a9c53dae49f17d5a15420.exe
-
Size
5.3MB
-
MD5
09655101ee7a1bcbae91e4ce463a8955
-
SHA1
d617854445e84d64666bbb470f51627ff2f668e0
-
SHA256
9aea332d407a458e281fcd59216522c393e3ceec104a9c53dae49f17d5a15420
-
SHA512
6a14fbc9b246cf3614ab917f3a3e5c0afadf9a181092c3112ff5ec7cf0cd1f991860fd6723143ee11e18d320d83388a415066e8ed3cd705e14d71f8663ad7567
-
SSDEEP
49152:zIdualPUxZwxV/7GHt2He74cdP2llZw77LQ0soNF2He74cdr27lZw77LQ0soNcIi:WblPUmHzc4wWHzcAwHblPU
Score
10/10
Malware Config
Signatures
-
joker
Joker is an Android malware that targets billing and SMS fraud.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9aea332d407a458e281fcd59216522c393e3ceec104a9c53dae49f17d5a15420.exe"C:\Users\Admin\AppData\Local\Temp\9aea332d407a458e281fcd59216522c393e3ceec104a9c53dae49f17d5a15420.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.3MB
-
Filesize
32KB
-
Filesize
1.3MB
-
Filesize
200KB
-
Filesize
472KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
520KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
124KB
-
Filesize
40KB
-
Filesize
124KB