Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
12/10/2024, 06:10
241012-gxb6qaxekf 712/10/2024, 06:05
241012-gtlkzs1hpk 712/10/2024, 06:01
241012-gqwlsa1gnr 7Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
12/10/2024, 06:10
Static task
static1
Behavioral task
behavioral1
Sample
Lossless-Scaling-SteamRIP.com[1].rar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Lossless-Scaling-SteamRIP.com[1].rar
Resource
win10v2004-20241007-en
General
-
Target
Lossless-Scaling-SteamRIP.com[1].rar
-
Size
44.4MB
-
MD5
d385a7c53e65b104d6619f14ff0b020c
-
SHA1
3274c0758ef45de6cd70eefd5a418e6780cd20d2
-
SHA256
194bbbe678f8f36fd11a7fe6053c8dfc8f4d304cc5c7097c03ff6ca301d052a9
-
SHA512
ebbc735a30c340d7e72b8fc0d2424d394eee84ba0f9324860210161f498c1956c71943c22324e4df62d59097893d71d62d3aa774130802e85832478f309b386e
-
SSDEEP
786432:4/pSQ2FZqm6cmyzKLkEzwHj8JrMSvddgDJulQCBX157WNxlSLG7aNwbdwO4pfPzs:4UjZqYmtJUD8JoSMJoNv7WQLQSwbqhI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2348 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2348 7zFM.exe Token: 35 2348 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2348 7zFM.exe