Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
04/04/2024, 16:55
General
-
Target
7bc872896748f346fdb2426c774477c4f6dcedc9789a44bd9d3c889f778d5c4b.exe
-
Size
13.9MB
-
MD5
fb7a0dcd4769c1e10fd773299f81a2f7
-
SHA1
31bc0b83033eed0e10a87bb2014d7640262ad4ba
-
SHA256
7bc872896748f346fdb2426c774477c4f6dcedc9789a44bd9d3c889f778d5c4b
-
SHA512
9aac1ae6deedb263b6e4f4471ce73dad01c484150e629963bc9feb70ed28b499cf7246f16c8384f40b7db64463d403b940cd5dca7f3d12ce4974e8d0f787abb0
-
SSDEEP
196608:SjDoBUR6POBHk2j7Y+x7k4uZeShv2Xts1odKw:ODoBURcOBEd47luZe2v26iK
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7bc872896748f346fdb2426c774477c4f6dcedc9789a44bd9d3c889f778d5c4b.exe"C:\Users\Admin\AppData\Local\Temp\7bc872896748f346fdb2426c774477c4f6dcedc9789a44bd9d3c889f778d5c4b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken