Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
21/10/2023, 21:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.ed4fb893a323bbd6f804d6ad98504420.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.ed4fb893a323bbd6f804d6ad98504420.exe
Resource
win10v2004-20231020-en
2 signatures
150 seconds
General
-
Target
NEAS.ed4fb893a323bbd6f804d6ad98504420.exe
-
Size
201KB
-
MD5
ed4fb893a323bbd6f804d6ad98504420
-
SHA1
e2c3a028e10eeb2d9c2ca961d63f8f728e860a0c
-
SHA256
1f09ac6a1292aa24f066331ef7962dabde378629ba7231e393278ff84737ff05
-
SHA512
50737622fc6762e7994796499351526ce54abc0fcae72f67fc0640231fedeb59a984d10ad93d39571f2a8a9c3a26fd829c7deaf36b69e8b1a7febeee0d20952d
-
SSDEEP
6144:WvVNKTWduZn4HXfDHHjpWVncWYSlYhluu/QtPK:WjgPZ4HvrHj436/IK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe Token: SeIncBasePriorityPrivilege 2000 NEAS.ed4fb893a323bbd6f804d6ad98504420.exe