Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 17:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
InstallNow_01234.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
InstallNow_01234.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
InstallNow_01234.exe
-
Size
24.0MB
-
MD5
d7c97a17cba88cfad40e6b6865d36b69
-
SHA1
27874d972274cbf7ead81a5d72409f230d4c2efb
-
SHA256
3ea7307cb1f9474766bb2c94e0cfe64c767683b4aac4e2af13aa081cafa532a8
-
SHA512
553c648df31feaa06d30ef4e2e2d23e67fb2559eac80c40e76bb366f19cfc87d90b8efb3a047d653494b34424bd438235781a4e8ca232e9530f66232460a40ba
-
SSDEEP
786432:gOdpT/WbKV55j0lN1EkTqA5a+Nc2sfqVfE:gOhOS0c2PE
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2044 InstallNow_01234.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2044 InstallNow_01234.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2044 InstallNow_01234.exe