Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 16:23
Static task
static1
Behavioral task
behavioral1
Sample
7c63fec65ab8bc9e1f14211251e1e7e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c63fec65ab8bc9e1f14211251e1e7e8.exe
Resource
win10v2004-20231215-en
General
-
Target
7c63fec65ab8bc9e1f14211251e1e7e8.exe
-
Size
93KB
-
MD5
7c63fec65ab8bc9e1f14211251e1e7e8
-
SHA1
4e066b8a032bfdeae7ab8e037d55129e03f73cce
-
SHA256
7fb68b64e615a3760b0277efbe9dec7939c7cb29df9055370d6d3b621e4aab57
-
SHA512
e20b20970f7aff3a1e460ffcd416f08255643c6ae7a3cd737529c9267b868dcc00128bf5cee02cacc28bd5914aba7b77e022eb62e45205febd45d751cd0d26ae
-
SSDEEP
768:WeWGCQxs9kGd96NDkSV2bIXzl4CnTDHGsDf8RUFqoD4bDIsFDBnotLRRYtST8W/G:1WGxs9kGdYk8wO4Cnt8RUyhotw5W/+C
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2080 Winkpaj.exe -
Drops file in System32 directory 4 IoCs
description ioc Process File created C:\Windows\SysWOW64\Winkpaj.exe 7c63fec65ab8bc9e1f14211251e1e7e8.exe File opened for modification C:\Windows\SysWOW64\Winkpaj.exe Winkpaj.exe File created C:\Windows\SysWOW64\Winkpaj.exe Winkpaj.exe File opened for modification C:\Windows\SysWOW64\Winkpaj.exe 7c63fec65ab8bc9e1f14211251e1e7e8.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeTcbPrivilege 1520 7c63fec65ab8bc9e1f14211251e1e7e8.exe Token: SeTcbPrivilege 2080 Winkpaj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c63fec65ab8bc9e1f14211251e1e7e8.exe"C:\Users\Admin\AppData\Local\Temp\7c63fec65ab8bc9e1f14211251e1e7e8.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:1520
-
C:\Windows\SysWOW64\Winkpaj.exeC:\Windows\SysWOW64\Winkpaj.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:2080
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
91KB
MD52d3fa94aeb88f43ab22a24ad66511415
SHA1c69d53ba0c6105e75349928cab4d548fa554fab0
SHA25654f5631b984ea6472614f2ac687b1cedc405ccf967c278e894b96efa7e2faf35
SHA512721ca946940a5d5dbbb0766509c340a9ccc680ececd9196b9e2e1b206e4f2c20b751122a373141a058b5df73510a4bce751e99a0bcd4157c5341ff96dc9080b3