Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230824-en -
resource tags
arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system -
submitted
30/08/2023, 21:47
Static task
static1
Behavioral task
behavioral1
Sample
Krnl.exe
Resource
win7-20230712-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Krnl.exe
Resource
win10v2004-20230824-en
2 signatures
150 seconds
General
-
Target
Krnl.exe
-
Size
1.8MB
-
MD5
f8ed22f5bb54f2b4906b602e55ab56e1
-
SHA1
9a4f59afd6974802b2c6f0ef7d3d5c4dab3db832
-
SHA256
0ebed279fa0ecd6d549d1ffd92c863769cfa29c38daad73a8e668575a7efc57d
-
SHA512
8657561baece0f5ddb15020b166e1ea8b6787188084f1d0b522a64ab39b60382d12b88df98fbfe53ae54edd6f9b1eacb1fadb6be2e7458eac2b73b7e99468cf8
-
SSDEEP
24576:vPABanooMW/8umFbh8A0SsKFucT+KNgxyscRU7ecSgL6y+gk+rnxdarFmPr:vP1uB0SV1+KSxyrRUzS65+x+rnxYrcPr
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 4672 Krnl.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4672 Krnl.exe