Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
81s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
06/07/2023, 02:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
A94DF8607EC00DB78D4E4EE91A5CAA49.exe
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
A94DF8607EC00DB78D4E4EE91A5CAA49.exe
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
A94DF8607EC00DB78D4E4EE91A5CAA49.exe
-
Size
379KB
-
MD5
a94df8607ec00db78d4e4ee91a5caa49
-
SHA1
0b261f27dbcbd51fc4073ec4959081fb68aea573
-
SHA256
da816e315d1130151e152d0e390be7ffec1272503ed5368c3957eeeb9c9fdea9
-
SHA512
257b95e307cbc5419678b461fef4f2d729f365768159acb45a86f04bc55b5a704d88f1a140949b8ada6b98b0cae537c0282e831d40184a97c3766f66b0486938
-
SSDEEP
6144:jCRqZ7gWMN93Hl7afE+yptBGXts9J0u/QnB6LrPwlic3u7J:+Rqqx93cfEXOXtR0nPwlPuV
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4924 A94DF8607EC00DB78D4E4EE91A5CAA49.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4924 A94DF8607EC00DB78D4E4EE91A5CAA49.exe