Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
24/12/2023, 12:50
General
-
Target
App/DontSleep/DontSleep_x64_p.exe
-
Size
406KB
-
MD5
4864da84bfaf9d2a41e09ddf9dc0df08
-
SHA1
e07961853ea43cbf49b730e7b92c1bf1e8a39713
-
SHA256
539b25ae96037c81d879fabe83d7d984db96abf3070a85dd716f544541e73fa7
-
SHA512
a7b5cda0b01c59e8e2105b82d56c58f75796d3462d551d5e5f0dfe1e13c59709175b6d3f62987021f4ad31322c43136178b130f1e6e8bcbed556d0ce0a0a367d
-
SSDEEP
6144:UrS2ntcQuFoggsbMgZGmPkZ3VUTGVBweJFCGZZbDr9gedCoUv2YFsuHYrAL:UroMgPNT0FjzoHOY948L
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 7 IoCs
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\App\DontSleep\DontSleep_x64_p.exe"C:\Users\Admin\AppData\Local\Temp\App\DontSleep\DontSleep_x64_p.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25B
MD571bfa4b1b2a2049befa50a86463a014f
SHA18ca6218c1f92b40da01501e18786cc2724e4c769
SHA256a4683279940ca2ea6c25b63f07f41d7e2eab4ac3246ff57c8c771e7c923abd29
SHA512574ccbc6a9387eed4e74af3e06a5023db1f74e24a8a9f3e9a96bee77483c3e5da257df4ff7976f7e389f51ec9ca89c56b103186fe499f5f3839738cafe657735