Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 01:11
General
-
Target
Five Nights At Shrets Hotel 2 - V2.0 - Win x64/Five Nights At Shreks Hotel 2 (Official)_Data/sharedassets0.ps1
-
Size
180KB
-
MD5
29eb435b92c7cba02dec6271f6ac779d
-
SHA1
e9c77d27258c46c63069389699199c6bb5c175d5
-
SHA256
21c550016f05ebd5ab1aacbf41100fafee09cd83a607b681a2c86084eacd930c
-
SHA512
5c2aa8caf04b0f42256eca7373b9e297f2ff8cbcc86afa7e9589fb3c0a20d4450b7359c98137177102cebccfa6c9c50795ec0c638ef215b5ecdd6466fafdf2af
-
SSDEEP
3072:xubNsGoiSs9dwiix1CnP5+XF7ieOS+ysv1KH71XzExPeePQDLMPKeH/id9cibDW:2GRs9dQ1sYV7QSIv1KHasDwIuiW
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Five Nights At Shrets Hotel 2 - V2.0 - Win x64\Five Nights At Shreks Hotel 2 (Official)_Data\sharedassets0.ps1"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB