Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 10:39
Static task
static1
Behavioral task
behavioral1
Sample
a0f951434a0734d85dc07b5dc6c107ef4d0a52883c2e24192f7789a7f6f77c4a.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0f951434a0734d85dc07b5dc6c107ef4d0a52883c2e24192f7789a7f6f77c4a.exe
Resource
win10v2004-20240709-en
General
-
Target
a0f951434a0734d85dc07b5dc6c107ef4d0a52883c2e24192f7789a7f6f77c4a.exe
-
Size
1.3MB
-
MD5
291480f000eff9c216ee3e8c0b02e2cf
-
SHA1
6d493d34a31eabbd109a9a0f7a5defffbcc64492
-
SHA256
a0f951434a0734d85dc07b5dc6c107ef4d0a52883c2e24192f7789a7f6f77c4a
-
SHA512
28609ffdb85e0630a3cc4b26b27a4f471ed7038f5f949a6a069450c9ba01b68c3e7833da65020a49e2199f82489f42a0ef6df76f802e8eec76d5edf676d26118
-
SSDEEP
12288:9E9B+VGxqTSgZG5GnWMBUKZGYaJ08vTZLfX+PdgdnW:9E9BvxVirnlBUKZ408vTZrX+lgdW
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe a0f951434a0734d85dc07b5dc6c107ef4d0a52883c2e24192f7789a7f6f77c4a.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4564 a0f951434a0734d85dc07b5dc6c107ef4d0a52883c2e24192f7789a7f6f77c4a.exe