Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 17:09
Static task
static1
Behavioral task
behavioral1
Sample
6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe
Resource
win10v2004-20240508-en
General
-
Target
6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe
-
Size
4.3MB
-
MD5
0abd8b1703ec06e1f6f796e8afcf1284
-
SHA1
5f17cc6fe29ce89885e0cc00cb4ef76f8cec4cca
-
SHA256
6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f
-
SHA512
1e4ef75c6ab27949d02a00a667ed8f34bf3597b18bea33ebfb9e168f1501b519317ec9e0a781fcb09e6838b6981b000c0d5ece0fad4b6611b50bb6a272551685
-
SSDEEP
98304:VvbHGZpn+8vcAAGY36VS/clxf59+XxRxy+UPW5:VvbGrcslxf59eRxyPW
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 7 IoCs
description pid Process Token: SeDebugPrivilege 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe Token: 33 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe Token: SeIncBasePriorityPrivilege 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe Token: 33 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe Token: SeIncBasePriorityPrivilege 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe Token: 33 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe Token: SeIncBasePriorityPrivilege 1620 6c26b5355714f0144eff044ae2f4f74d2a075eb81b97f4f757c7da54ceff5b7f.exe