Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
02/11/2023, 11:41
Static task
static1
Behavioral task
behavioral1
Sample
ead75481f7a5291b4b614885709b4e542b22f6e243ea8b07e3e6d7a02c8264a8.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ead75481f7a5291b4b614885709b4e542b22f6e243ea8b07e3e6d7a02c8264a8.exe
Resource
win10v2004-20231023-en
General
-
Target
ead75481f7a5291b4b614885709b4e542b22f6e243ea8b07e3e6d7a02c8264a8.exe
-
Size
1.6MB
-
MD5
e17660f2636dea8975ee5726777ac56f
-
SHA1
cd829ba92b19de3591105c17da24560d699aa6df
-
SHA256
ead75481f7a5291b4b614885709b4e542b22f6e243ea8b07e3e6d7a02c8264a8
-
SHA512
9185d23ec09ebb0a2f4bb33664502992921c6754ddcb4817113438cccc580c8ea49b1b946ca018f73b5bacc7524806f151d408e06a5555bf926d1702cbf7d0cd
-
SSDEEP
12288:UeaCSCB++4YXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3b:VaCJBuYsqjnhMgeiCl7G0nehbGZpbD
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe ead75481f7a5291b4b614885709b4e542b22f6e243ea8b07e3e6d7a02c8264a8.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2124 ead75481f7a5291b4b614885709b4e542b22f6e243ea8b07e3e6d7a02c8264a8.exe