Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/09/2024, 02:42
General
-
Target
Lossless Scaling/LosslessScaling.exe
-
Size
964KB
-
MD5
9cfb9984a53f41ebdf00f8f0633fde26
-
SHA1
a13985c15c6402d25c9e9c64f4e9947fd685635f
-
SHA256
4b07ba9c32b61773cfb0e2d7b13689c26a13a6dc463b9294aeb1d5e8e4159e8d
-
SHA512
2a768a77151353e693fb15abc4f72842c002043dece1920e8bddef04c2d620c7345650d369ccab463a72a55939ad7b3bf8fc8e9c3a6f55d8e7ab76ad331b5eea
-
SSDEEP
12288:pDooEuEDS4MCLSyf6mOuGyW38yHJc+CKtOaO5Z7WhaGwnzE4ZbuRCwmhI2J+0sD+:1oP3tMCLPf1Oi32OvzTo4ZiRlT/MLz
Malware Config
Signatures
-
Modifies Control Panel 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Lossless Scaling\LosslessScaling.exe"C:\Users\Admin\AppData\Local\Temp\Lossless Scaling\LosslessScaling.exe"1⤵
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5ace795bd58a45d23bac1c6e60ec23df3
SHA188a78c643a5b10fc175886cc9cb12f45ef501492
SHA256c34328175332f4cab70206ba70faf4dbc483d6b0d38f7f6af7d6dba3da9242b0
SHA51211cde86b8ada81857036ebbd22cf6025a90f12d6048033fa43ffbb8fb30d0f6892a853c6521ee3719f031ba9b3906e374b86cd40568c536d1c2bf60027ef4985
-
Filesize
712KB
-
Filesize
10.8MB
-
Filesize
152KB
-
Filesize
40KB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
920KB
-
Filesize
224KB
-
Filesize
744KB
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
56KB
-
Filesize
984KB
-
Filesize
8KB
-
Filesize
10.8MB