Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
48s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
25/11/2022, 23:23
General
-
Target
c3427c0426a5c051fa2bfc25b1f0ea532f209e01dfdcef0ea25e17c5b6f3d205.ps1
-
Size
10KB
-
MD5
e6c8516a04bcb196030548538c974ca6
-
SHA1
bc84d05aef73f333e247cf1ffd8afbbee24f46cf
-
SHA256
c3427c0426a5c051fa2bfc25b1f0ea532f209e01dfdcef0ea25e17c5b6f3d205
-
SHA512
4c9171dc71484b336391ae8449750055ed393401a0c7a7debf917446918e7efec0e4ef69a3904f0a7595b5aa41fd640415a0642f713b023d36aa60842ebdec8d
-
SSDEEP
192:7f/E874TMfT9axYwOFqtTM9E/pZlldiNTMHPOQ97eFgds2fDlOL1JhhKTTlJKuqn:7fyTMfytTM9E/pZFuTMHPOQ974gds2fI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\c3427c0426a5c051fa2bfc25b1f0ea532f209e01dfdcef0ea25e17c5b6f3d205.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
12KB
-
Filesize
3.0MB
-
Filesize
124KB
-
Filesize
12KB