Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
26/11/2022, 22:45
Static task
static1
Behavioral task
behavioral1
Sample
8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd.dll
Resource
win10v2004-20220812-en
General
-
Target
8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd.dll
-
Size
196KB
-
MD5
f5c37ff0e853f59bf03d6b747feba1cc
-
SHA1
25fe6d3c94caaf47ce157cea735f4a404f86b2ab
-
SHA256
8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd
-
SHA512
f53b5ef58b3da5b27b4ab3a363b1904607fc5d222b46b9217aeb9242d680faee0afef8a27fa64ee2fa67499a5f0a223b3c8d2a45a2f9946a7aa287b1fc3b43bb
-
SSDEEP
3072:Up1uTeLfvOF5jgROLAr+m8KO5YRKGwFeMtle:UKTOfmF5joOY+mw57ll
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1992 rundll32.exe 1992 rundll32.exe 1992 rundll32.exe 1992 rundll32.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1992 rundll32.exe