Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

a59a25b6f8...f8.exe

windows7-x64

1

a59a25b6f8...f8.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    48s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 13:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe

  • Size

    136KB

  • MD5

    927b2ac03d5e89d9ebdb44d36fac2560

  • SHA1

    129c2b719714a9b7d4ede0a01f7c891cdb4d300f

  • SHA256

    a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8

  • SHA512

    95eb357d78250638b2332b90659571a5b7b6506adb99a4a8d4d8d24f9679b955ef98a7eef0df9186e6121be1189525280f1b3dae79239d25c492342fc69b8caa

  • SSDEEP

    3072:sMhKbq00qawM7pjz+QSKrETGrWI6IS+vfpQTB9/vo9eR05ir:3hKmt1/EIi+5QHvobir

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe
    "C:\Users\Admin\AppData\Local\Temp\a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1376-54-0x0000000075091000-0x0000000075093000-memory.dmp

    Filesize

    8KB

    Download