Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

beabbec673...74.exe

windows7-x64

1

beabbec673...74.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    43s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23/11/2022, 23:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    beabbec6734ded80b7e01e98dd412fd08698855c40b5ca90ffb2ad8d21283174.exe

  • Size

    116KB

  • MD5

    4358581097524cb0123127d7dd598b50

  • SHA1

    0a50c263073aeb74d302436a1e16347bbebe1574

  • SHA256

    beabbec6734ded80b7e01e98dd412fd08698855c40b5ca90ffb2ad8d21283174

  • SHA512

    07f117848e6cac66948c72d14bbfa9bf8c158d60ac7d30659627deb39fa25f06d0452e56e254da160005dca6df2ee53e0c63b71f622b0c68ff210b06f67b8cec

  • SSDEEP

    1536:hXuRMtJaG7R4cJMWeT29b0OCLOBs4vKX5UWkZxDa8dctu5EkXBbpXSW3lk5D+txS:hXvecezT7ivK8x1Ktg1lnRD2

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\beabbec6734ded80b7e01e98dd412fd08698855c40b5ca90ffb2ad8d21283174.exe
    "C:\Users\Admin\AppData\Local\Temp\beabbec6734ded80b7e01e98dd412fd08698855c40b5ca90ffb2ad8d21283174.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1652-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1652-55-0x0000000074270000-0x000000007481B000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/1652-56-0x0000000074270000-0x000000007481B000-memory.dmp

    Filesize

    5.7MB

    Download