Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
07/10/2023, 07:24
General
-
Target
14f0701f7a76aaa070bdb564bc5c3f1dd88d20295abe2ec5af167cb220f98ba8.exe
-
Size
14.5MB
-
MD5
9edb062582cec3b6fcbb30fc1695163d
-
SHA1
0ae42a213f0619556d3b9271ce3abd6175ba8ab2
-
SHA256
14f0701f7a76aaa070bdb564bc5c3f1dd88d20295abe2ec5af167cb220f98ba8
-
SHA512
5a262916dec6f96bea466c9e2029976bbc6fd37574c50eb8d6565a1395db759c2a96950444b0b7080749a0cad39ccf8231b1a6d7a3b642af62fade64f7dd73b3
-
SSDEEP
393216:ASS6X9ZdML9tAY4NJamEA2QCroNUaCcctPvHU:AE9YX4Nc5QLbQ+
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 21 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\14f0701f7a76aaa070bdb564bc5c3f1dd88d20295abe2ec5af167cb220f98ba8.exe"C:\Users\Admin\AppData\Local\Temp\14f0701f7a76aaa070bdb564bc5c3f1dd88d20295abe2ec5af167cb220f98ba8.exe"1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.2MB
-
Filesize
12KB
-
Filesize
8.2MB
-
Filesize
8.2MB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
8.2MB
-
Filesize
8.2MB
-
Filesize
4KB
-
Filesize
8.2MB