Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

winprofile

windows7-x64

1

winprofile

windows10-1703-x64

1

Analysis

  • max time kernel
    43s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2022, 03:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    92df0ba275eaab27e141053450d01c3cd88540638f2808157da80b1276d1cbda.exe

  • Size

    557KB

  • MD5

    b7668babda482f1a831c1ade24f485a0

  • SHA1

    40f3c8d2e0ddb544208a79d116f2bb5f7c55fbe2

  • SHA256

    92df0ba275eaab27e141053450d01c3cd88540638f2808157da80b1276d1cbda

  • SHA512

    bf25b0a92cdd142f915c87f8813cf1cbfe2bad2b207e990f17a859d5e5db9944a261336bb8c2c3a9ca916ecc59590c2d318a464da01a336de3f2f90463e38c63

  • SSDEEP

    12288:meorAfowKU5t0k280JTu26x2IjkfWSHjn1VrbCI3IoArgYovl6tzTOpyECwWBa5o:m7rAZtZoJTu/4IwfWMj/bCWI0rKz6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\92df0ba275eaab27e141053450d01c3cd88540638f2808157da80b1276d1cbda.exe
    "C:\Users\Admin\AppData\Local\Temp\92df0ba275eaab27e141053450d01c3cd88540638f2808157da80b1276d1cbda.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1676-54-0x0000000000340000-0x00000000003D6000-memory.dmp

    Filesize

    600KB

    Download

  • memory/1676-55-0x0000000075E31000-0x0000000075E33000-memory.dmp

    Filesize

    8KB

    Download