Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 18:39
Behavioral task
behavioral1
Sample
build.exe
Resource
win7-20230831-en
3 signatures
150 seconds
General
-
Target
build.exe
-
Size
32KB
-
MD5
c7c0b3aff725cd716b39c057e1e1ba9d
-
SHA1
7e30df28585a9c330b628ddd6911941ce8c2092b
-
SHA256
3b8ca7c0c2564a955c39f5fc01c11abbc581d2b79b89235692677c984364ff10
-
SHA512
9448531ae289dbefeafdcc0da9368b82aad0a88be368ce617443bb512649861aa44f7178811141704ee3322371ad4f0f5d22819c801e73a4433b2ecf587584e3
-
SSDEEP
768:X+CD9JxV5zlMM8oxVJt76NHRVFr9j43wOjhCbC:Xh9h5JH97QHDFr9j2wOjIm
Malware Config
Signatures
-
Detect Xworm Payload 1 IoCs
resource yara_rule behavioral2/memory/3812-0-0x0000000000710000-0x000000000071E000-memory.dmp family_xworm -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3812 build.exe