Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1799s -
max time network
1560s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 18:58
Static task
static1
Behavioral task
behavioral1
Sample
svhi1wt5.jar
Resource
win7-20240215-en
windows7-x64
4 signatures
1800 seconds
Behavioral task
behavioral2
Sample
svhi1wt5.jar
Resource
win10v2004-20240426-en
windows10-2004-x64
5 signatures
1800 seconds
General
-
Target
svhi1wt5.jar
-
Size
2.3MB
-
MD5
c3233eb0f0216752a546ae6ca551ff37
-
SHA1
66cffb233e75078558750b2b5717b448fc2a9e29
-
SHA256
000cb4373ce83f5e828b4ed209ae85ef97a819f0d6724e27a930be7c0f589107
-
SHA512
be4f13994490e38d031d2d1d7675e7e87e77778f619b7f77c5e7c04e1cfd566aa074ec0488cc68c5625b4492ae60ddf6e31667783a07e80d15ee2e6b221e1c6f
-
SSDEEP
49152:vEDD8ICikBd0+gU2qw+mSUTgy+PI1FLVTxBE7a9S:vk85BYH+7Uky9FYES
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2800 java.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe 2800 java.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe Token: SeDebugPrivilege 2800 java.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2800 java.exe 2800 java.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5732880711c61a96f90ce86da9b6c6b02
SHA15a1506124a768c6e61c7fe2629374432f2aa4327
SHA2563fac7db73b105c20465e965f0a68682166f341dfe624f7c630755e8846b8d992
SHA512e6eea645106f21d90e867f2086656ab91905e4c301bca075304cc35feff9f1e5635966f5652329ebe08f880f550d2e2e0c8079beb48c96deb9438a89d1ec3954