Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10akcms3.9.6...cp.ps1
windows7-x64
1akcms3.9.6...cp.ps1
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6/db.js
windows7-x64
1akcms3.9.6/db.js
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...ex.htm
windows7-x64
1akcms3.9.6...ex.htm
windows10-2004-x64
1akcms3.9.6...nc.ps1
windows7-x64
1akcms3.9.6...nc.ps1
windows10-2004-x64
1akcms3.9.6...nc.ps1
windows7-x64
1akcms3.9.6...nc.ps1
windows10-2004-x64
1akcms3.9.6...nc.ps1
windows7-x64
1akcms3.9.6...nc.ps1
windows10-2004-x64
1akcms3.9.6...nc.ps1
windows7-x64
1akcms3.9.6...nc.ps1
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 18:11
Static task
static1
Behavioral task
behavioral1
Sample
akcms3.9.6/admincp.ps1
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
akcms3.9.6/admincp.ps1
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
akcms3.9.6/cache/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
akcms3.9.6/cache/index.htm
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
akcms3.9.6/cache/tasks/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
akcms3.9.6/cache/tasks/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
akcms3.9.6/cache/templates/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
akcms3.9.6/cache/templates/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
akcms3.9.6/configs/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
akcms3.9.6/configs/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
akcms3.9.6/configs/templates/ak/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
akcms3.9.6/configs/templates/ak/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
akcms3.9.6/data/index.htm
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
akcms3.9.6/data/index.htm
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
akcms3.9.6/db.js
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
akcms3.9.6/db.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral17
Sample
akcms3.9.6/fore/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
akcms3.9.6/fore/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
akcms3.9.6/images/admin/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
akcms3.9.6/images/admin/index.htm
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
akcms3.9.6/images/editor/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
akcms3.9.6/images/editor/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
akcms3.9.6/images/index.htm
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
akcms3.9.6/images/index.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
akcms3.9.6/include/admin.func.ps1
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
akcms3.9.6/include/admin.func.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
akcms3.9.6/include/buy.inc.ps1
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
akcms3.9.6/include/buy.inc.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
akcms3.9.6/include/category.func.ps1
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
akcms3.9.6/include/category.func.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
akcms3.9.6/include/common.func.ps1
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
akcms3.9.6/include/common.func.ps1
Resource
win10v2004-20231215-en
General
-
Target
akcms3.9.6/include/common.func.ps1
-
Size
42KB
-
MD5
279c08a69a8444ede19287073eefc8a1
-
SHA1
ad70fef5455ada21f0101cc84ad62dfca3eca7ff
-
SHA256
277dc131ac15db0094b9933d02c8132ce25331469e1ce5782fd5d7d3efcce445
-
SHA512
6704164ed6f60f49e55d64a37b82006541c991ad979f1f732f78998d5d2143c022389a42e785774285d40869380600cfa7d48859f52fa057bfcaf3df3a97ac2d
-
SSDEEP
768:5aIjyLSfrs3C5pIfO1yo2z5W98awOXOl4KkMZIZIDSRx2x+6:Zyc5pD1yogcBwHl4KkMZ0eiW+6
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2716 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2716 powershell.exe