Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
36s -
max time network
23s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 01:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0ab1471844a9d7f1a45055f3c34bd85a.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0ab1471844a9d7f1a45055f3c34bd85a.exe
Resource
win10v2004-20231215-en
6 signatures
150 seconds
Errors
Reason
Reading agent response: Timeout while submitting payload
General
-
Target
0ab1471844a9d7f1a45055f3c34bd85a.exe
-
Size
18KB
-
MD5
0ab1471844a9d7f1a45055f3c34bd85a
-
SHA1
67d5b5d597f275c844816b83e0ed823e981a68db
-
SHA256
61c1f59ae4e9cad337df387e043c533107e6c1b70a2b3c5fbd0d2054da46d0ac
-
SHA512
93a92e32973fc413e6d4575847b981c380c8a31ad95a8038e7ea53a846b7e910fc7808c9d337f60827c9192dc3ded3aa4616bfe63b71f01c687c912783e6263a
-
SSDEEP
384:RzwL9DZnx+WNUoNNTKF41HaqJe5ctKpbck/+zWaJpi31E9deWjHgY:FS9+WBp7Hapa0OiloZAY
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2828 0ab1471844a9d7f1a45055f3c34bd85a.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: 0 2828 0ab1471844a9d7f1a45055f3c34bd85a.exe