Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

7c63fec65a...e8.exe

windows7-x64

7

7c63fec65a...e8.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 16:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7c63fec65ab8bc9e1f14211251e1e7e8.exe

  • Size

    93KB

  • MD5

    7c63fec65ab8bc9e1f14211251e1e7e8

  • SHA1

    4e066b8a032bfdeae7ab8e037d55129e03f73cce

  • SHA256

    7fb68b64e615a3760b0277efbe9dec7939c7cb29df9055370d6d3b621e4aab57

  • SHA512

    e20b20970f7aff3a1e460ffcd416f08255643c6ae7a3cd737529c9267b868dcc00128bf5cee02cacc28bd5914aba7b77e022eb62e45205febd45d751cd0d26ae

  • SSDEEP

    768:WeWGCQxs9kGd96NDkSV2bIXzl4CnTDHGsDf8RUFqoD4bDIsFDBnotLRRYtST8W/G:1WGxs9kGdYk8wO4Cnt8RUyhotw5W/+C

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c63fec65ab8bc9e1f14211251e1e7e8.exe
    "C:\Users\Admin\AppData\Local\Temp\7c63fec65ab8bc9e1f14211251e1e7e8.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1520
  • C:\Windows\SysWOW64\Winkpaj.exe
    C:\Windows\SysWOW64\Winkpaj.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\Winkpaj.exe
    Filesize

    91KB

    MD5

    2d3fa94aeb88f43ab22a24ad66511415

    SHA1

    c69d53ba0c6105e75349928cab4d548fa554fab0

    SHA256

    54f5631b984ea6472614f2ac687b1cedc405ccf967c278e894b96efa7e2faf35

    SHA512

    721ca946940a5d5dbbb0766509c340a9ccc680ececd9196b9e2e1b206e4f2c20b751122a373141a058b5df73510a4bce751e99a0bcd4157c5341ff96dc9080b3

    Download Submit