Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
28s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
03/06/2023, 21:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TGX.exe
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TGX.exe
Resource
win10v2004-20230220-en
11 signatures
150 seconds
General
-
Target
TGX.exe
-
Size
686KB
-
MD5
44a4e3d019880eab7d1cc7fe50400227
-
SHA1
c0e60962bf5dcd8d47bfa6aec07917a13fed86bf
-
SHA256
91ecd3092e58361a48a096d844f1846f5e6ca76b5091e9499ed3b4c3fbe28a3d
-
SHA512
622a6ad80c6b357e46e3428311584584d3329d69f46b7c44c31c1083f3fbe9e859da5259784600d5260dfa3ea836fbb02c80c8070e13ba7936d1b273c2c17e38
-
SSDEEP
12288:21IytQVxkI3A9VWcTkRe4n5yxmrKLR/mYbkDo44NTPqyiRr1JY1ay7nmGQ6:EZqJyxmrKLVmYdqr1Swy7ni6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1480 2032 WerFault.exe 27 -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2032 TGX.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2032 wrote to memory of 1480 2032 TGX.exe 30 PID 2032 wrote to memory of 1480 2032 TGX.exe 30 PID 2032 wrote to memory of 1480 2032 TGX.exe 30 PID 2032 wrote to memory of 1480 2032 TGX.exe 30