Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
11/01/2023, 16:55
Static task
static1
Behavioral task
behavioral1
Sample
0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe
Resource
win10v2004-20221111-en
General
-
Target
0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe
-
Size
957KB
-
MD5
7073db9e89e6b20255e3820fb5f7ea6a
-
SHA1
8d2e12e7a47696a930ec566d6be782ab09571a36
-
SHA256
0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f
-
SHA512
753ba7a2c1b54edab45fc61c06158b37b82dd2d80abfe5c5daee4a347267a60ab49fbb97b5a3515d50417f1b8e3d5774a2a7783a668a2279fa89e3d42fb6754f
-
SSDEEP
24576:GVkcZx4mb4GmSCzQVeIonnnskhkS0aVuc:NyxPb12QQIonnskhoyv
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: SeBackupPrivilege 1980 0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe Token: SeRestorePrivilege 1980 0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe Token: 33 1980 0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe Token: SeIncBasePriorityPrivilege 1980 0bbd5efd22e3bbf2ed7e1e380053b782a464841c26b473081dee619adbc3d26f.exe