Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

7c63fec65a...e8.exe

windows7-x64

7

7c63fec65a...e8.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    146s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 16:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7c63fec65ab8bc9e1f14211251e1e7e8.exe

  • Size

    93KB

  • MD5

    7c63fec65ab8bc9e1f14211251e1e7e8

  • SHA1

    4e066b8a032bfdeae7ab8e037d55129e03f73cce

  • SHA256

    7fb68b64e615a3760b0277efbe9dec7939c7cb29df9055370d6d3b621e4aab57

  • SHA512

    e20b20970f7aff3a1e460ffcd416f08255643c6ae7a3cd737529c9267b868dcc00128bf5cee02cacc28bd5914aba7b77e022eb62e45205febd45d751cd0d26ae

  • SSDEEP

    768:WeWGCQxs9kGd96NDkSV2bIXzl4CnTDHGsDf8RUFqoD4bDIsFDBnotLRRYtST8W/G:1WGxs9kGdYk8wO4Cnt8RUyhotw5W/+C

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c63fec65ab8bc9e1f14211251e1e7e8.exe
    "C:\Users\Admin\AppData\Local\Temp\7c63fec65ab8bc9e1f14211251e1e7e8.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3196
  • C:\Windows\SysWOW64\Winkgvg.exe
    C:\Windows\SysWOW64\Winkgvg.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\Winkgvg.exe
    Filesize

    87KB

    MD5

    50bfc650bb75156a93b6e7f708435256

    SHA1

    869ece45389bdf74462e6c19e2914438c4d0d96b

    SHA256

    3a864b8b211a0b679bb3541e78319691eca8f16ce706ff5633f8ae9db7dce8e5

    SHA512

    156f3f3eb3801718c5cb608eee49f645e21f0e89507bc231efc78449c88b00fecdc15808e5be12f859d28519866ac1d643bbef1733c0194a452d23cfaa1fc9da

    Download Submit