Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
30/10/2023, 07:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fake ID Cards Creator (@MojtabaX007).exe
Resource
win7-20231020-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fake ID Cards Creator (@MojtabaX007).exe
Resource
win10v2004-20231020-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
Fake ID Cards Creator (@MojtabaX007).exe
-
Size
270KB
-
MD5
c84f8396660ba8554682aaddb341ffce
-
SHA1
fd3597c18e3e1efd18dc49c731ae927941a28d49
-
SHA256
3a496f3d261809866293320c9a343bbbc11e6bfd85b55a27e5d7a1bf71933c86
-
SHA512
0756452765fb90e4323be54bfd457e0da3122cdbacf714bfb9bc368ccc6203438044bff33d1089a4f3cd116719002eb6a560f73beee66a3d2aa368df3615e74d
-
SSDEEP
6144:veUJZIwkZFnp0Ak27gU6bF8VaOAObpTTXaKFh:vxrT0FnphE78QOJNaEh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2312 taskmgr.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2312 taskmgr.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe 2312 taskmgr.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fake ID Cards Creator (@MojtabaX007).exe"C:\Users\Admin\AppData\Local\Temp\Fake ID Cards Creator (@MojtabaX007).exe"1⤵PID:2252
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2312