Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
163s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 12:16
General
-
Target
Tzhwq.exe
-
Size
42KB
-
MD5
c9b5783bc626451ab2d0c27b9c9ac76d
-
SHA1
bac23adef5e496237cf7640f83b460055be1ee69
-
SHA256
1e0cd5804ef4947f77e9c4d74aad36b7248e1802bed673363243f9bb9ad0f73a
-
SHA512
718c8ea362353c9e987913b514c5d4ebc5b34c4dac0ae08b9c2bded0e5cb03e342b7195cf6f0be0ff7b1e78e5c3b0bd3bbb0347fa8e3a32bfe812bee6a1fd1fa
-
SSDEEP
768:j/bdC1bypS0BSpwX5K+LhtvirD+9BvPdD7Ypy:9O0+enLHqnYXdKy
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Tzhwq.exe"C:\Users\Admin\AppData\Local\Temp\Tzhwq.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB