Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
26/12/2023, 15:17
General
-
Target
7861b936cc3aefc014b8d7d906a1c596.exe
-
Size
44KB
-
MD5
7861b936cc3aefc014b8d7d906a1c596
-
SHA1
8a52badc4d56bb6dcf2759dfc53ce895301ce6b2
-
SHA256
eb44043c47df9279a8b0bf660b8dd35d8d4b9414c7d20f208ca6cd32b718512c
-
SHA512
d8f25ad409c3f615cc25e59ffd7bfb4f4adf7ce88ceb5144625eec28d09d6ebce63e599c76760819b654f469fc79caaf86d75e863adef80e7ef611323f02c784
-
SSDEEP
768:v7EN+vMVUDdbgcIHGzSYKVYK4xi6JLj/HbwgzHIhwO2GTf:4qw0tLSYTi6LTbwgzHmf
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7861b936cc3aefc014b8d7d906a1c596.exe"C:\Users\Admin\AppData\Local\Temp\7861b936cc3aefc014b8d7d906a1c596.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
6.9MB
-
Filesize
6.9MB