Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
40s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
28/11/2022, 07:09
General
-
Target
win32k.dll
-
Size
262KB
-
MD5
07458acb129ef3ef233d284361b4e158
-
SHA1
e46b46400d8af345bad009fd0b100e1d6a6ae13a
-
SHA256
8088f08a5636cec3bf8b9f05b6ca2d0b21a76a56199d6ccd1777a6f6a7b9fdde
-
SHA512
116609f09bc694d3205f989d1c6228b4ab773fd2afd1f22149432d7c2ff20be60dd871aaa6ea51f05f690e31946de8d3b3cde23919ec81f060a1ca812282e08c
-
SSDEEP
3072:4fdCm94F6x59KscGxM3CqA+EGbiXBm2jVAMhCxbCK6YCX4Vc9ZgPvO8Rc9JiZgA4:K1fx5Ysw3C7+EhRmZMQHbwTgPW0wiP
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\win32k.dll,#11⤵
- Blocklisted process makes network request
- Suspicious use of AdjustPrivilegeToken