Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
14/09/2024, 18:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ClientNonevclid.exe
Resource
win7-20240729-en
3 signatures
150 seconds
General
-
Target
ClientNonevclid.exe
-
Size
75KB
-
MD5
6dd3e14db8d2e3cd3200c062d30ae97a
-
SHA1
4f4d968dab2cfc95e7aebb004421ecac1eac34df
-
SHA256
b5c8b201846ef3b548ad18607ffb482302b2570c15842477fe71b0a564e31e3b
-
SHA512
3a69bcdefabaf4418816b6fa8ae90d28a3893b01a73d7478d9c0e43ffa3de9a250b5731dc042a3453ce806601ee8f5e1aa6cff9b63c742e20314201858a5e8f4
-
SSDEEP
1536:d0kYa1ez0MoSzaUwSyJSbeLvc6OfcHktpqKmY7:d0+1eQMoqwJSbe/yj2z
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1744 ClientNonevclid.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1744 ClientNonevclid.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1744 ClientNonevclid.exe