Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
15/07/2024, 08:54
General
-
Target
2011522597.exe
-
Size
100.2MB
-
MD5
38a95a5d96d27b7a365f3a874288b5ca
-
SHA1
3515820fbbac2dc3b97b698bf2bb3be3c8242843
-
SHA256
4affdb8cd5ed942b2b0593878d7ab2c5658628c460df6cb4cccd945b16356240
-
SHA512
83d989493d52f132fd08a5111b30e66296a9bb207ddbecca537bd60b0dcc5f8fadb0aa57f5b0c24a4a768a53540912cd2ceaf1173d08c66132d531a7a8c8db80
-
SSDEEP
3072:KTeTY1km5WBqwP3fspQ/Xz7iasXHyC/hX6Axv3yUt7LEwjj8BPOI5s8DxOi:KiTtiWB0mL7teJ5Vp3yO5j4G7a
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2011522597.exe"C:\Users\Admin\AppData\Local\Temp\2011522597.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken