Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
62s -
max time network
67s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
20/03/2023, 05:37
Static task
static1
Behavioral task
behavioral1
Sample
121 CGPT Prompts for Internet Marketers & Bloggers.7z
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
121 CGPT Prompts for Internet Marketers & Bloggers.7z
Resource
win10v2004-20230220-en
General
-
Target
121 CGPT Prompts for Internet Marketers & Bloggers.7z
-
Size
13KB
-
MD5
022103315e06b3d59493165bb2ba1224
-
SHA1
3c7ed676fc4202ea237f940ce44435a95b660591
-
SHA256
d47e415788c89416cda1efa54122909ae4f62c67d00dbb4ae80ba28a5b34fac6
-
SHA512
b919c2d8378320210f56d0030af4728a968c0e36718557cf916da58fb0b59a6e12de2d005e4e45ba3dd0f915f018ca34268326de357de49804a2875d664793f6
-
SSDEEP
192:2B1CXIKe5GhRndtjrzMKG99bb+K+0Tccd3vf7RQ9KjWceZYL+DuqP1l1LmmHRJ3j:ACXToafzs9HeqQYjYYiDzjpmA5rzb
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: 33 956 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 956 AUDIODG.EXE Token: 33 956 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 956 AUDIODG.EXE
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\121 CGPT Prompts for Internet Marketers & Bloggers.7z"1⤵PID:2008
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:1176
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x1881⤵
- Suspicious use of AdjustPrivilegeToken
PID:956