Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2023, 14:31

General

  • Target

    SecuriteInfo.com.Win32.PWSX-gen.13199.16919.exe

  • Size

    80KB

  • MD5

    fa5937e176d9ca57aaf46c9782946998

  • SHA1

    24430ef6c847d1481f781585df45c16e5b69425e

  • SHA256

    a9887d11928a1c708e094571b877c96ced70c281a265eb7b34fb6103bbf5231b

  • SHA512

    fb3de6fdab6fadd712999b9f25ae65c265518ccf1cc9b28347bb522cd93b3854de651a91c9ba9d2d5c3ad5d90b2114e30383140632a064fed52e78d314321b36

  • SSDEEP

    1536:rFncunAC4mRCPf/XPWWgwvK077ClAhIa0s45DT2BLiREcB1+kq01tc2qrs:RncunAC4mEPH/v5Ia1xcBcyZqI

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.13199.16919.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.13199.16919.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2468-54-0x0000000000EE0000-0x0000000000EFA000-memory.dmp

    Filesize

    104KB

  • memory/2468-55-0x0000000074920000-0x000000007500E000-memory.dmp

    Filesize

    6.9MB

  • memory/2468-56-0x0000000000CA0000-0x0000000000CE0000-memory.dmp

    Filesize

    256KB

  • memory/2468-57-0x0000000074920000-0x000000007500E000-memory.dmp

    Filesize

    6.9MB

  • memory/2468-58-0x0000000000CA0000-0x0000000000CE0000-memory.dmp

    Filesize

    256KB