Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

95b9d6a447...18.exe

windows7-x64

1

95b9d6a447...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 23:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    95b9d6a4477a8f0e4f21ff0bec2ec92c3edeac2fb3b849301975a82842c3d918.exe

  • Size

    100KB

  • MD5

    2888a147a4c94b2c137db1742ad0281f

  • SHA1

    42dcfb90f801f649cf6dde71ff98dc5c43edefa4

  • SHA256

    95b9d6a4477a8f0e4f21ff0bec2ec92c3edeac2fb3b849301975a82842c3d918

  • SHA512

    809e91832cf6e0541a48137227556b27f9faecac663446946911eb722c0e4211c136fa621d5b840da9c5aaf570f24d9c4319795ab48d45b190b20e058425cad3

  • SSDEEP

    1536:zsT7HEdX3AKypWcGbFl+lBVpp3PMSCYeJbxLJxBMkQGt+eQcTNT:zckAvpWcGbFWLDbeJbxLJbME4OT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95b9d6a4477a8f0e4f21ff0bec2ec92c3edeac2fb3b849301975a82842c3d918.exe
    "C:\Users\Admin\AppData\Local\Temp\95b9d6a4477a8f0e4f21ff0bec2ec92c3edeac2fb3b849301975a82842c3d918.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/984-132-0x00007FFEA4480000-0x00007FFEA4EB6000-memory.dmp

    Filesize

    10.2MB

    Download