Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 12:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hack-browser-data-windows-64bit.exe
Resource
win7-20240221-en
1 signatures
150 seconds
General
-
Target
hack-browser-data-windows-64bit.exe
-
Size
7.5MB
-
MD5
75bd8ba4bbadab80ff13e6c90f0dc779
-
SHA1
253042ad1db168cb13ff4847dfca375d13f9700a
-
SHA256
9f7825c841e8dbc812b0c6924c2c5237f3e3ecb3e73a49462ebb67129c636159
-
SHA512
8c568beaeb3938359c9d3b9e895748a2450b63602a1238fc9f54a993ebeb9145b3e8ae4ffd97f75dc2dbcee31f95a723fa1f6a874a576c740a73bf4b779e3734
-
SSDEEP
49152:JiEZCAb6vv9TzK3U7V4Y8prk3ds2HcFxN7aZ3A8KvYANeiouCicZh3uT3p2zgA4V:EtG63dt8gojjN/C9np1s
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: 33 2004 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2004 AUDIODG.EXE Token: 33 2004 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2004 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\hack-browser-data-windows-64bit.exe"C:\Users\Admin\AppData\Local\Temp\hack-browser-data-windows-64bit.exe"1⤵PID:2504
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:2844
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2001⤵
- Suspicious use of AdjustPrivilegeToken
PID:2004