Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28/11/2022, 05:17
General
-
Target
9bab382b3b715d7b8ae399bd8f62880b06d3b9651e636eb0332f54e34de1148a.exe
-
Size
30KB
-
MD5
f90fddbe180241cb087d1b3ba17ccd93
-
SHA1
87d350e8d30fcb4255fb4ab44a35c5285edd4204
-
SHA256
9bab382b3b715d7b8ae399bd8f62880b06d3b9651e636eb0332f54e34de1148a
-
SHA512
eac1f182a3b92d68dcd3ca1168f9898181ebef3cc9d389c385b5e74eef86076dd7118d6395ac55f3850a8c288c55c068793312cdacf1f480da8d0eb41798b8dd
-
SSDEEP
384:BS0L/tmgebmeKSHrvtPItNcV9nnHtp+bkFWNHWR9+EMQM89:BxTtmPPLtDnNYLY9lZ9
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bab382b3b715d7b8ae399bd8f62880b06d3b9651e636eb0332f54e34de1148a.exe"C:\Users\Admin\AppData\Local\Temp\9bab382b3b715d7b8ae399bd8f62880b06d3b9651e636eb0332f54e34de1148a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken