Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
251s -
max time network
304s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/02/2023, 19:17
Static task
static1
Behavioral task
behavioral1
Sample
7840c07d4d8f75dcd747d96912d2518659c0cd56.exe
Resource
win7-20221111-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
7840c07d4d8f75dcd747d96912d2518659c0cd56.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
General
-
Target
7840c07d4d8f75dcd747d96912d2518659c0cd56.exe
-
Size
476KB
-
MD5
8a80deda6089d4ec669248c5ac2e8cca
-
SHA1
7840c07d4d8f75dcd747d96912d2518659c0cd56
-
SHA256
472e60a2c0f1f41c0e2adf4a849376a09050a035d0f8cb2ca8b0f341daefc4a1
-
SHA512
e64f3c994282553275bae5c9477eb70ed346bc687ed958dbc64971424b745470c654e6c962b8702e08b86b6385c98469cdbfbd3ea253203b8070802d260568d9
-
SSDEEP
12288:JCQ5gnHbL8z2hb/ha9SctISaeumhiF0AQ8Zazas:V5gm2bhqh8Q8ZaGs
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 4396 7840c07d4d8f75dcd747d96912d2518659c0cd56.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4396 7840c07d4d8f75dcd747d96912d2518659c0cd56.exe