Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
89s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
11/10/2022, 07:32
General
-
Target
HRSword-main/HRSword.exe
-
Size
1.9MB
-
MD5
916c298f538625fb37e08d01c22d2ea4
-
SHA1
925bf071f481425c37e625c0516a40dcd085cbce
-
SHA256
d2fff815db8941a025e956eca5d6346a2b3c8f4c2b8f34427f15cfe43cdbc842
-
SHA512
45f3cbdc114041dbdc1729ef619718cca637587fe8f2efdd000f793b2f5a6732c6ed900db4867d944dfcbd2e3c6cc0e3d887a3ff2beb34e40224f1c5b46434a9
-
SSDEEP
49152:jIPFxcRj55DwPW3IeN+rjKtQp2r33OfMbA7UKpB1obg5TYA+Dj1YwycrVQRx:mx4j55EPWYeN+rjKtQpA33OfMbA7UK7N
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HRSword-main\HRSword.exe"C:\Users\Admin\AppData\Local\Temp\HRSword-main\HRSword.exe"1⤵
- Suspicious use of AdjustPrivilegeToken