Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
62s -
max time network
60s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 12:50
Static task
static1
Behavioral task
behavioral1
Sample
New Text Document.txt
Resource
win7-20240508-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
New Text Document.txt
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
New Text Document.txt
-
Size
19B
-
MD5
cfa4507a0676f6d818a994a2df118942
-
SHA1
736e520641d61f4019487eff5df3472ccc6da832
-
SHA256
71d7c01cd392549f33d4d812437ae8617e5b9bf23244fd4fdefd9804e13d20e1
-
SHA512
62149485e24e5a621dfac263027b544e9ff298c717e6dd390db253137cf63f835ccf275a3f45a69c7a6d4b6913c5af5fa950868676d56a8fbb190b0f2e46db1a
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 55 IoCs
pid Process 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2920 taskmgr.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2920 taskmgr.exe -
Suspicious use of FindShellTrayWindow 63 IoCs
pid Process 1928 NOTEPAD.EXE 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe -
Suspicious use of SendNotifyMessage 62 IoCs
pid Process 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe 2920 taskmgr.exe
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\New Text Document.txt"1⤵
- Suspicious use of FindShellTrayWindow
PID:1928
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2920