Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
10/10/2024, 16:44
241010-t82a7s1dmq 710/10/2024, 16:43
241010-t8bqjs1djp 510/10/2024, 16:30
241010-tz1nbazhmp 5Analysis
-
max time kernel
135s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/10/2024, 16:44
General
-
Target
ray.zip
-
Size
752KB
-
MD5
8a7a6ac2fedd86f4509a5c93cfdd3edd
-
SHA1
fa8c2e8e21d12d3fff90a8d76558e679b7192592
-
SHA256
8cdf678bed1558ca64a6788519e28f727a5ee75b808051530c1a2f0d9c974301
-
SHA512
95f8e6aa66c412f0d958f36523ed3394d9de30f8e7f0ff79c89405bc073a4c747b6c52e19f57606f7e9523fd5ef3403c4115d8a5dba25cd5137b612d03e9163b
-
SSDEEP
12288:DDocdeg/IyQKcKjEZm/vOyHbfI01uXtR/Wk2XxyCPVsCI/p3Jb5fwCe6TFdocw5i:DDomexZobvQ/l2Xx5fI/9rvBvXwYhP
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ray.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow