Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1185s -
max time network
1187s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05/09/2024, 08:31
General
-
Target
240830-rf46aayhpm_pw_infected.zip
-
Size
6.3MB
-
MD5
010afde39630628bb3a813d18e1f158e
-
SHA1
b193c3de6891e04b085dc50ff078560f7833db68
-
SHA256
f944260a83df5ac58eff1a29b79135b62ab38b22df94f7fd7f012c819d47ab12
-
SHA512
b0fb9bc316ab0703dacca6a18136c2810acb04bd69c9fb029713e4b13dda3574113ebbc9059134571cf344dd505c8b4dc88573aa9e7543083cced3b4aed179ad
-
SSDEEP
98304:LfqOGhuproVayD9jQOqfda3bEkS7L0Yrh7auHMfoQf8siQg6+9frPw6MQa2pCVU4:L/GoqDDCOJZQlarQ6SrPgQLpqI1s9sM
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\240830-rf46aayhpm_pw_infected.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\" -an -ai#7zMap32149:138:7zEvent27061⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow