Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 23:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
674f97a0a2c6ecedb8986cacfade0a208cfc9650322a9cdd437957b45b66f10f.exe
Resource
win7-20240220-en
2 signatures
150 seconds
General
-
Target
674f97a0a2c6ecedb8986cacfade0a208cfc9650322a9cdd437957b45b66f10f.exe
-
Size
1.5MB
-
MD5
0029734ae53642de752c4aad3c983388
-
SHA1
2f36ee6bac18370507c3cb5066d03561e3e44b54
-
SHA256
674f97a0a2c6ecedb8986cacfade0a208cfc9650322a9cdd437957b45b66f10f
-
SHA512
d9bb7a4c06581198a05f7835dec95d7aa86b57a4e5098041d0c266903d55bc73aaf2c8821d2e1da9f904fa17ca5fa58ff9a358f68e54cc65d27419a1b3ee50ca
-
SSDEEP
12288:HhMDaCZEpRmxi1sXYuHa53u4wU0VZAsztwy9IU6FpbOI+Xs:HzkE3mxksIuHa53YUS9wLDFRW
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 674f97a0a2c6ecedb8986cacfade0a208cfc9650322a9cdd437957b45b66f10f.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2728 674f97a0a2c6ecedb8986cacfade0a208cfc9650322a9cdd437957b45b66f10f.exe