Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    07/10/2023, 11:46

General

  • Target

    bftest2.exe

  • Size

    903KB

  • MD5

    20858fa8a2e9918c857206f98398a151

  • SHA1

    562a67caff70d05eb264a0e39bed80a36816a036

  • SHA256

    e7990b55b6db34aef4c6ef60351fbc3f19c4a451106b33aeaca4b68a674b84d1

  • SHA512

    936f4438ae97d707c4110e7d90a92d1fe3a6018cf4039b894e4a2d30e9f3f3d268ea3d6687e97630b28972abcd4ac0343b34da57d0bd42b0d90d5d01311518a8

  • SSDEEP

    24576:FSmvJ9Y5G1FOPjWcjL8TxNYqEv0rODHZ/lpWUmJKfplz7GknpD:FSmh9Y56OaccTtsWIZ/GUm0fpB7

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bftest2.exe
    "C:\Users\Admin\AppData\Local\Temp\bftest2.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/884-0-0x000000013F520000-0x000000013F606000-memory.dmp

    Filesize

    920KB

  • memory/884-1-0x000007FEF5440000-0x000007FEF5E2C000-memory.dmp

    Filesize

    9.9MB

  • memory/884-2-0x000000001BAC0000-0x000000001BB40000-memory.dmp

    Filesize

    512KB

  • memory/884-3-0x000000001C960000-0x000000001CC12000-memory.dmp

    Filesize

    2.7MB

  • memory/884-4-0x000007FEF5440000-0x000007FEF5E2C000-memory.dmp

    Filesize

    9.9MB

  • memory/884-5-0x000000001BAC0000-0x000000001BB40000-memory.dmp

    Filesize

    512KB