Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
04/02/2024, 02:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8a9bea061091cff92cd8de5c08ca9d33.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8a9bea061091cff92cd8de5c08ca9d33.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
8a9bea061091cff92cd8de5c08ca9d33.exe
-
Size
160KB
-
MD5
8a9bea061091cff92cd8de5c08ca9d33
-
SHA1
8a35f3f5395427f78f00d55e1b616a99a02820b1
-
SHA256
bef79e59be13459d6095d9be063852a858b0bdb6db30946a2dbaf55cff7e81f2
-
SHA512
82e4d6a5c9a5d006019da9fa5514e97153e5060dde299a88c49b49bd93c25ebf4e7588dfdda5e4fd91421e2b5756414a280e1a4cf153276d2e254145eb7ac0d6
-
SSDEEP
3072:y+f72z/3ZRcuVtdJOJ91ax/bWtwMHEA1lYAMjMNZqm4wRo5gam5x+3gT:yv7HeGx/21kbYC7mo5gee
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files (x86)\Bifrost\server.exe 8a9bea061091cff92cd8de5c08ca9d33.exe File opened for modification C:\Program Files (x86)\Bifrost\server.exe 8a9bea061091cff92cd8de5c08ca9d33.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1636 8a9bea061091cff92cd8de5c08ca9d33.exe Token: SeDebugPrivilege 1636 8a9bea061091cff92cd8de5c08ca9d33.exe