Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/05/2024, 02:28
General
-
Target
c0d70d2ea078060a3e4e85fa94166cfeb9ad062f1fe049916c85683df0c12113.exe
-
Size
747KB
-
MD5
1a69759686b131ad1172dd5e5ee03110
-
SHA1
380902f22d5296d9e22533e032597759fc506bb3
-
SHA256
c0d70d2ea078060a3e4e85fa94166cfeb9ad062f1fe049916c85683df0c12113
-
SHA512
198b6a29203c14c1407873280752d83d2b77c578d5e31386cb34d51de80cc64e056ff9c8463d32cdd050a860a3cf2518213f6f7fbe1811e74b74541ff7ee707a
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0d70d2ea078060a3e4e85fa94166cfeb9ad062f1fe049916c85683df0c12113.exe"C:\Users\Admin\AppData\Local\Temp\c0d70d2ea078060a3e4e85fa94166cfeb9ad062f1fe049916c85683df0c12113.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB