Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

malware.exe

windows7-x64

1

malware.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    40s
  • max time network
    110s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2023, 10:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    malware.exe

  • Size

    750.0MB

  • MD5

    15235fc972e856af442359427d81e06a

  • SHA1

    594607a8b56865fb1f8ebfd5dd0de626c7760c30

  • SHA256

    385ac578cff30147a59f0408fa8680fc6008653ce537e81ff6ea1984a8269cb6

  • SHA512

    4d417ddf156dad90c4c3a31de6ca3809927afb7df078016e39910e814fda139bcadcc64d4dcaf936345198a3021a4b022459f2bc424864f89ae767edb2f8e190

  • SSDEEP

    98304:ydB6UreFagh8R9/b2hBqmJ4b3nOd0lNVZ0F0NHSAauB/4CenfgGRXLJdo:yeUdcq/6qH3XN601Sln5do

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\malware.exe
    "C:\Users\Admin\AppData\Local\Temp\malware.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1356-54-0x0000000000400000-0x0000000000888000-memory.dmp

    Filesize

    4.5MB

    Download

  • memory/1356-55-0x0000000000400000-0x00000000008D6000-memory.dmp

    Filesize

    4.8MB

    Download

  • memory/1356-56-0x00000000028D0000-0x0000000002910000-memory.dmp

    Filesize

    256KB

    Download

  • memory/1356-58-0x0000000006360000-0x000000000644C000-memory.dmp

    Filesize

    944KB

    Download