Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21/08/2024, 02:37
Static task
static1
Behavioral task
behavioral1
Sample
f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe
Resource
win10v2004-20240802-en
General
-
Target
f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe
-
Size
26KB
-
MD5
63166f4636e5156006b25b214f8708ca
-
SHA1
965291a6f60d6141b76288f5de8ac8af2857b3fb
-
SHA256
f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e
-
SHA512
224710e280786a5af58ba1114dcf20a3a60b3aa75c8f9b393e76a79d673c4ba16dc8616538ef29080a66c945371aeaf4a4fb032e79c5978a6cb5a81fac3a2e3d
-
SSDEEP
768:XjjptCnpgZ6R//jf4nqvyj5J7BoIDbj8I:XjdtCnpgwZzDvypoIDEI
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 61 IoCs
flow ioc 21 pastebin.com 25 pastebin.com 28 pastebin.com 6 pastebin.com 37 pastebin.com 46 pastebin.com 47 pastebin.com 10 pastebin.com 56 pastebin.com 63 pastebin.com 12 pastebin.com 39 pastebin.com 42 pastebin.com 55 pastebin.com 22 pastebin.com 32 pastebin.com 44 pastebin.com 16 pastebin.com 18 pastebin.com 26 pastebin.com 29 pastebin.com 33 pastebin.com 36 pastebin.com 49 pastebin.com 8 pastebin.com 50 pastebin.com 7 pastebin.com 34 pastebin.com 40 pastebin.com 52 pastebin.com 13 pastebin.com 24 pastebin.com 27 pastebin.com 43 pastebin.com 45 pastebin.com 54 pastebin.com 19 pastebin.com 41 pastebin.com 51 pastebin.com 53 pastebin.com 57 pastebin.com 60 pastebin.com 17 pastebin.com 31 pastebin.com 15 pastebin.com 23 pastebin.com 35 pastebin.com 11 pastebin.com 61 pastebin.com 38 pastebin.com 14 pastebin.com 20 pastebin.com 48 pastebin.com 58 pastebin.com 64 pastebin.com 4 pastebin.com 9 pastebin.com 30 pastebin.com 59 pastebin.com 62 pastebin.com 5 pastebin.com -
Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: 33 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe Token: SeIncBasePriorityPrivilege 2652 f479721c75395efd183d8938a7f8491492658c5c742b73fbf2293050a2de147e.exe