Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 08:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
43352685fd3f90b8951455cf776b68b9.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
43352685fd3f90b8951455cf776b68b9.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
43352685fd3f90b8951455cf776b68b9.exe
-
Size
91KB
-
MD5
43352685fd3f90b8951455cf776b68b9
-
SHA1
5f227bed90eb37860d2e5dd80a7b0f722180e72e
-
SHA256
8966f65d9c83371b3f425a85765b2b5b16eeab43cca0e6afd75d9495b2e04db8
-
SHA512
0bf0747ce05b16e4dd706f6e81f1b411246a82da400453fcc3198d09bfadb40a4619977551edad786cfb1df9ddcdd5100206b1160d07fdb1aa90769f51189215
-
SSDEEP
1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEF+pq:NwtRonyypexoiNtxYGgq
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 564 43352685fd3f90b8951455cf776b68b9.exe 564 43352685fd3f90b8951455cf776b68b9.exe -
Suspicious behavior: MapViewOfSection 1 IoCs
pid Process 564 43352685fd3f90b8951455cf776b68b9.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 564 43352685fd3f90b8951455cf776b68b9.exe