Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 02:23
Behavioral task
behavioral1
Sample
bPHF.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bPHF.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
bPHF.exe
-
Size
32KB
-
MD5
52884c1cab64fce4ebf6bac9dd66b0d4
-
SHA1
6c764b9f987718bfbdc1be40593aaa7b93dedcf3
-
SHA256
1a2c4455849c0b9c3b3b9a3babe3774b2cf2628ebaf8b10ea555d487b0f7ac93
-
SHA512
cbdccf6c2d3fb4501b88d20b55d24f2b62aafdd47157e684cde77c140aa705e981f03350375395f45cff06732d465d5b06f7a147de217ddbff89113e4023c1d4
-
SSDEEP
384:x0bUe5XB4e0XiODzw0Q0mS03AWTxtTUFQqzF+ObbV:qT9BuBY55dYbV
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 29 IoCs
description pid Process Token: SeDebugPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe Token: 33 4956 bPHF.exe Token: SeIncBasePriorityPrivilege 4956 bPHF.exe