Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    43s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2023, 19:38

General

  • Target

    679ccdcc75b121c4252a92c7bd1a310254b9cb3ef6881b4cf77ea5987d517f88.exe

  • Size

    6.6MB

  • MD5

    747e72ff56944a0dbbdf1cdbf7366d35

  • SHA1

    60087135a3633ff59326f6c9d723dc6437d8fa4e

  • SHA256

    679ccdcc75b121c4252a92c7bd1a310254b9cb3ef6881b4cf77ea5987d517f88

  • SHA512

    ec16e4d40b4524f7dd0fcf84648033a34ec7a89da3e1c4ebc3e2401a9b92d6cb21bd250b4533dbc9c57658acd6f6a0102eaf8a331a869a0df762624dfe32691c

  • SSDEEP

    196608:C056K3glccFFjm4BwZ7SEgIAmlMLZehydmQDc5drI:C05lg+cFFjm4BO7RAmSlehRQcdrI

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\679ccdcc75b121c4252a92c7bd1a310254b9cb3ef6881b4cf77ea5987d517f88.exe
    "C:\Users\Admin\AppData\Local\Temp\679ccdcc75b121c4252a92c7bd1a310254b9cb3ef6881b4cf77ea5987d517f88.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1264-54-0x0000000076711000-0x0000000076713000-memory.dmp

    Filesize

    8KB

  • memory/1264-57-0x0000000000390000-0x00000000003F8000-memory.dmp

    Filesize

    416KB

  • memory/1264-56-0x0000000000390000-0x00000000003F8000-memory.dmp

    Filesize

    416KB

  • memory/1264-55-0x0000000000390000-0x00000000003F8000-memory.dmp

    Filesize

    416KB

  • memory/1264-58-0x0000000000390000-0x00000000003F8000-memory.dmp

    Filesize

    416KB

  • memory/1264-59-0x0000000000390000-0x00000000003F8000-memory.dmp

    Filesize

    416KB