Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
04/10/2024, 23:12
Behavioral task
behavioral1
Sample
Vakitharcama.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
Vakitharcama.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Vakitharcama.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
Vakitharcama.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
General
-
Target
Vakitharcama.exe
-
Size
206KB
-
MD5
9bd34fe539a048d0e2bc0e3ad7c4eaeb
-
SHA1
ee24f606db053798d6a17f89302b9dfeabc1b06f
-
SHA256
917050f1ec1f187d7df789d5aa774ac9f6472b45ac50a8a99fb0fc977627f791
-
SHA512
fac2f39a9408584bb23301f11eec845cb2aad343ce8dd24fcb0e7a8ca4d191a32b20374af9699aa99800e0fb2caaee743e022187b44bb8e01e2000833d81d7e6
-
SSDEEP
6144:oJSTrJJQJohgBZl8pRcsdow0uiSalT0ECMg:oJoJ9cl8pRGw0uiSST0ECMg
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe 2108 Vakitharcama.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2108 Vakitharcama.exe