Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
8s -
max time network
11s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
12/05/2023, 19:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Deceive.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
General
-
Target
Deceive.exe
-
Size
1.3MB
-
MD5
b64c8f11de6b74f733a14bb6d531f5f8
-
SHA1
0fe0f96ff1c46c611227c233aab8815611f424de
-
SHA256
766754b253ac0a77707755374a91856f1914cdb5678494bc07f6bd3e37cab89a
-
SHA512
19d4b9a94085113c69060e4ba46eb5197179ccb530ea1facd80df3da9969e94a0124d73e2b3be94a1d3de3816047fe4e51df3f46fce9f45e59e5da7d2b6a4437
-
SSDEEP
24576:Wjj1jWV0il9s7yHjTjCJTd08imlKfITk5BkAptcxBOqDVphkgRUpbwxhJ:WjRS+i3s7yHjTjCv08llAIIcC6BOqDV3
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3664 Deceive.exe 3664 Deceive.exe 3664 Deceive.exe 3664 Deceive.exe 3664 Deceive.exe 3664 Deceive.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3664 Deceive.exe