Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
08/10/2023, 02:43
Static task
static1
Behavioral task
behavioral1
Sample
8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe
Resource
win10v2004-20230915-en
General
-
Target
8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe
-
Size
12.1MB
-
MD5
394c671aa62a63ae087a354eab6ab608
-
SHA1
17ad0e5c4404d7bdaf2007eb7a9132385e52b131
-
SHA256
8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0
-
SHA512
77cb79f24bca6e1bc713cf6f51843d2c961effb6c986638acb216db6c800840e04151e2527928027d674ea2b0b1858bedbff1e9e51c02914c90ab5d043f5d524
-
SSDEEP
393216:6I0ipHtcobOfJguqsSFjeA9XUCawvqqbmsrHA:6Li1b0qbCS6MFbmsU
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2848 8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2848 8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe 2848 8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe"C:\Users\Admin\AppData\Local\Temp\8adb80cd7741c49e5ffb5dbfc06040c73fe9e62490152f26e08c2a01606ae9c0.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2848