Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 01:08 UTC
Static task
static1
Behavioral task
behavioral1
Sample
33eae3d42e8abcc05861778c8679759c347a54a3f386b5927afae7538c520472.ps1
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
33eae3d42e8abcc05861778c8679759c347a54a3f386b5927afae7538c520472.ps1
Resource
win10v2004-20231215-en
4 signatures
150 seconds
General
-
Target
33eae3d42e8abcc05861778c8679759c347a54a3f386b5927afae7538c520472.ps1
-
Size
1KB
-
MD5
23fef73a024bf14f093a75a10423c4b7
-
SHA1
b004fc269a805b62ba8003e4ccd84f07fd154e51
-
SHA256
33eae3d42e8abcc05861778c8679759c347a54a3f386b5927afae7538c520472
-
SHA512
9d42b3e14d9cc0b468c292b10685d180e99282daafbbbe38597a789e070ae16d5c4146755ea2c1c6965f9334b8cfad9f0aa9e0309f33f281737096ecc7ab5f7d
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2176 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2176 powershell.exe