Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
04/12/2022, 03:09
Static task
static1
Behavioral task
behavioral1
Sample
819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe
Resource
win7-20221111-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe
-
Size
449KB
-
MD5
0fb71e09a9c0d5a45299771df95d8e50
-
SHA1
3297063461cf18a8b874382e0d71f88b9e1b04be
-
SHA256
819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee
-
SHA512
6664144b3f098c2d77f08f714bbf088cb62448082b31c9c4ac2d801259249c3fa7faa91e9ac5d51aa5f179e92f9935d698fe18a90e50ae8217263fe594d9e667
-
SSDEEP
12288:sfsocKRoHJRnJVkcUzVrR6J1O07dvstqPg:sRcfpFJitq83
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/948-56-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-59-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-58-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-60-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-63-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-65-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-61-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-67-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-71-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-75-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-73-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-69-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-77-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-79-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-81-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-83-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-85-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-87-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-89-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-91-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-93-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-95-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-97-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-99-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-101-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/948-102-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: 33 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe Token: SeIncBasePriorityPrivilege 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe 948 819ac1f1eae6f36efbf649cc3886b07c9b5843926a2bfad29f28ba8dd42b43ee.exe