Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
49s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
11/05/2023, 08:15
General
-
Target
Iron.Lung/Iron Lung/Iron Lung.exe
-
Size
638KB
-
MD5
8616d9ef509ab81b4993a0063c39b8d2
-
SHA1
66f6e7d043b4f436b8b1e701d65ca0e0727b7963
-
SHA256
c686ff9610225cbd8992b371a473299286663f31575952249ba83aa1aeb54dc9
-
SHA512
ae7f5b04b1d4bfe332637225d881bfb70d5ac622ca7cc9b525acd4c1a4ef7bbdea676f5cbe41fcd606162e077a4c2442ac78f54792a7799203c190facc522224
-
SSDEEP
12288:o4eC1MMcZ+xjx+RtIDjgooM5ANyxOOnwaV2ZKFXv7+zo:XJcZ+Jx+t4JDAOnwaVj9Czo
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Iron.Lung\Iron Lung\Iron Lung.exe"C:\Users\Admin\AppData\Local\Temp\Iron.Lung\Iron Lung\Iron Lung.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Iron.Lung\Iron Lung\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\Iron.Lung\Iron Lung\UnityCrashHandler64.exe" --attach 1620 9871362⤵
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5381⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB