Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15/03/2024, 10:14
General
-
Target
cb2565dfc73e2a2b547c0a54d085910f.exe
-
Size
169KB
-
MD5
cb2565dfc73e2a2b547c0a54d085910f
-
SHA1
9e0b1b632765a2de3fea2a44436530746436bbe9
-
SHA256
a5bb3fc7347500fdf5a8fa486ea1293ddbd5eede0b8ac4d62337a72a3dc7fc13
-
SHA512
25762d3d6b18d563e2de7731d4b976534ea10d28a9902a1c4be4687402dcef944757f045954b9863c86f8366f96efc23f1a227da888f3c18fb77d10f8a52077e
-
SSDEEP
3072:UaGzQ7lmDUW0WysPk89b4Gj/UUjvPxD8emb3mQCijrevizW96h3dekuNLEEsrg+:mzQhmD5fLoUrxDdmynn6zbluqLx
Score
1/10
Malware Config
Signatures
-
Kills process with taskkill 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb2565dfc73e2a2b547c0a54d085910f.exe"C:\Users\Admin\AppData\Local\Temp\cb2565dfc73e2a2b547c0a54d085910f.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\taskkill.exetaskkill -f -im ashMaiSv.exe -im McShield.exe -im oasclnt.exe -im mcagent.exe -im McVSEscn.exe -im mcvsftsn.exe -im Mcdetect.exe -im McTskshd.exe -im mcvsshld.exe2⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
960KB
-
Filesize
48KB
-
Filesize
316KB
-
Filesize
28KB
-
Filesize
24KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
68KB
-
Filesize
32KB
-
Filesize
960KB
-
Filesize
24KB
-
Filesize
316KB
-
Filesize
28KB
-
Filesize
48KB