Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
272s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
01/07/2024, 19:23
Static task
static1
Behavioral task
behavioral1
Sample
exes/XeroxSetup.exe
Resource
win10v2004-20240611-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
exes/sqlceme35.dll
Resource
win10v2004-20240508-en
0 signatures
300 seconds
General
-
Target
exes/XeroxSetup.exe
-
Size
813KB
-
MD5
209643213416db088f81d660c3bfbb4f
-
SHA1
736e4d2dcad7fc50ee3db4ddb1443e1389058012
-
SHA256
e7084ea1588092c42b6f33b59be2c90b35612e985ca3c33598088bd9a5dc7b87
-
SHA512
00a1d8f6e8f994711f9a9f553e662f2e3fedd55a5339500a024fff162901f4deb1c9ca39e7bbd329c12f1a8535906fdad3027698bcc846370d2cc36f9d3592c9
-
SSDEEP
12288:GhEBQeExMUcFm1MQm1Mum1Mxm1Mpm1MQ8cAwFAEUETOQw71Iikng8Qm2ZU:CSQBG5QQk99IcAwtFyfpFj8Su
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 2088 XeroxSetup.exe 2088 XeroxSetup.exe 2088 XeroxSetup.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2088 XeroxSetup.exe