Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 05:35
Static task
static1
Behavioral task
behavioral1
Sample
MyCover4.ps1
Resource
win7-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MyCover4.ps1
Resource
win10v2004-20240508-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
MyCover4.ps1
Resource
win11-20240611-en
3 signatures
150 seconds
General
-
Target
MyCover4.ps1
-
Size
83KB
-
MD5
2bca0eb97a7c0825910517162251471c
-
SHA1
52d878223c596cb2f130514125e427f6f87d686b
-
SHA256
fa7b80f3d060c663691f7ede61847d7e1514145e569732af173f61e55ff6e72b
-
SHA512
c2a5c544ac5e35e7697c420a4c63a856756b4ffa8c361e497ffc9d705d08436ed3a5c768756896e3b75100d67bc68e06b563d3f34c2e9b9fb4ff09440a0bda18
-
SSDEEP
768:AjpppppppppepppppppppepppppppppepppppppppepppppppppNpppppppppepT:AE99+duVpx999+duVpx9
Score
3/10
Malware Config
Signatures
-
pid Process 2132 powershell.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2132 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2132 powershell.exe