Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
20/06/2024, 03:47
General
-
Target
qqnmbl/qq农牧伴侣.exe
-
Size
984KB
-
MD5
be9cbb9302bde7a17300ca57b3cd84d0
-
SHA1
3686bb9d8bc411340f339b2df987e895d46b35a4
-
SHA256
40b479e7e144d5d7c20af417d6cb68506c60fdcadaec17a2dfbb5a359657037a
-
SHA512
64e289cb27213ff5c976ecf78311e19737ece45b0a0f496176b7e7d2e4d22e0e5c071f4cb57873ac1225be0790975ec78d855a601ec4192da0b6c089b0a2ee9c
-
SSDEEP
12288:WVazNe8ezvFb47H/F8v3dnDEK9ZEpgVLMbuMv7Y8TQKp57mF1N3dijxaNC:F98vFbIfQLSuKHp5yF1Ntick
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\qqnmbl\qq农牧伴侣.exe"C:\Users\Admin\AppData\Local\Temp\qqnmbl\qq农牧伴侣.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx