Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 19:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7ebafcbe769f7d1c80fed51d42f16e5f.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7ebafcbe769f7d1c80fed51d42f16e5f.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
7ebafcbe769f7d1c80fed51d42f16e5f.exe
-
Size
357KB
-
MD5
7ebafcbe769f7d1c80fed51d42f16e5f
-
SHA1
ff83ba0d02351c1bcfa1f88e361560db9d4609ee
-
SHA256
35f8f54e3417795e8d1d7262b0542792ba692a2f44a71ae10e71fc5173bd6d49
-
SHA512
367727f471ad5780d1116bbfe8d56d012b5244f2f797d60865902fb67ad97504615b1144e1039ae2495dd70159052f239dc9f68c8ba3707a75d430ad73d36a44
-
SSDEEP
6144:Vu+kBmWicfSPyXTnkl+r+MHLt8TaggWQI9T1S0osk:VAmWip2TnGC+MHL2mgiIF1S0
Score
6/10
Malware Config
Signatures
-
Modifies WinLogon 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\4ece10f8 = "Ÿ\nÙ¹Êp\aÇ`ù\x118PÃcEœ@ÑeÉ\tTH³ÛNhUI]±L¬\vÓnä2|ûÐ+\x11l.â\x11 /~/VXÁ±Íh\x12ÆC}ƒÑ©æ_ÈÁb4¦ôYHÁ\x05÷4©ž‰\x16„¼¸\\ô$ȵ€¦\u009d¾í¬ñæo\rÕn\f¬œÆh'ÕŽ¼'°å\x01" 7ebafcbe769f7d1c80fed51d42f16e5f.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeSecurityPrivilege 2196 7ebafcbe769f7d1c80fed51d42f16e5f.exe