Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 14:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cc43fc53db97851293c24cfab3bf9b0b.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cc43fc53db97851293c24cfab3bf9b0b.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
cc43fc53db97851293c24cfab3bf9b0b.exe
-
Size
55KB
-
MD5
cc43fc53db97851293c24cfab3bf9b0b
-
SHA1
00894879c87e0eff67a0ad5ed55673b070844a6a
-
SHA256
c17744b0cf15b339a8db52fd9b7495025f37545e938df33829ce953d91a90da6
-
SHA512
4d0e259f3b2dcc676e166d1b4f4986a7e92ad57f1ecfaa6ec325cd6d8f49c4b0d60b532ead5c5bb0eaa1818843f0a5c3c4a571d5e2e132b48c3194c33d399615
-
SSDEEP
1536:/E2Vh82MHNTtSVkWjSfya/fit6XxEs+5/UdiB0:/E2VFgNUVk5ya/at6BEs+qdiB0
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1712 cc43fc53db97851293c24cfab3bf9b0b.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1712 cc43fc53db97851293c24cfab3bf9b0b.exe