Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/05/2024, 17:12
General
-
Target
Mirage 1.16 v0.2/DIM-1/data/villages_nether.gz
-
Size
55B
-
MD5
9ff30b295f05797deb6ea7b0cb001409
-
SHA1
0f406d4db2522c831f2dab77b6180684959e9c9b
-
SHA256
2437ad71ab04a142474c64d6eb2e1836bd062b922d6f6d7ed69e78fada30609d
-
SHA512
a132db3b23286f6df1d0499adf4fa625d57ba95e3d04562b4f449585c380e276bd4b3bb1509db0fc60c0c11c918563970fd666d88e297b9984ac457746bba080
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Mirage 1.16 v0.2\DIM-1\data\villages_nether.gz"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Mirage 1.16 v0.2\DIM-1\data\villages_nether.gz"2⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-