Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
42s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
06/12/2022, 00:39
General
-
Target
8614a89196bbe0af65f2e6f5a8c942486338c2a5251c5bae11904790851011c1.exe
-
Size
12KB
-
MD5
b86413fa70f41e252c01822723f38b94
-
SHA1
1aa0a79f7eaa4e918257c9741d577b15fee2a817
-
SHA256
8614a89196bbe0af65f2e6f5a8c942486338c2a5251c5bae11904790851011c1
-
SHA512
ecdb092dd863c8fd350d91448daf044e284335b8e339034c18878dfdebd1b69fa05c7bd3bb79b93e32a3bf136c3ec225410c04786a73b6182c3a475e2163eeea
-
SSDEEP
384:XTR3kbzaxCatBb2QZQBBGZMudIzj4OKU9pe:t3k/g/GBBGZMudU4Oj+
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\8614a89196bbe0af65f2e6f5a8c942486338c2a5251c5bae11904790851011c1.exe"C:\Users\Admin\AppData\Local\Temp\8614a89196bbe0af65f2e6f5a8c942486338c2a5251c5bae11904790851011c1.exe"2⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-