Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

AvastSvcZEg.zip

windows11-21h2-x64

1

Resubmissions

14/10/2024, 12:50

241014-p2y52swdmh 10

14/10/2024, 12:48

241014-p11mgs1ajn 3

14/10/2024, 12:42

241014-pxkrvswbpf 3

Analysis

  • max time kernel
    49s
  • max time network
    54s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14/10/2024, 12:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AvastSvcZEg.zip

  • Size

    152KB

  • MD5

    ed43370a0412ea28d7048056cd5625af

  • SHA1

    a8373cb02f1e2a903a72abc0b095c6f2aec76ea3

  • SHA256

    72a7b8fe4b8401120124e8f9460bfd457fbf76b70a0c057b58ff271c5b2aadca

  • SHA512

    7018988e3488297739c2f08ac1136300f38eee2956750a2ff4d4832751a5d17f2524abcefd00249f5e614178a15552e351c7f468fba6eab6784325723c88aa93

  • SSDEEP

    3072:uemqs4Y+6AmQ13r3ml90Ap1LpEc4PMdw6zRRxdEVxOyHKTjg3y26jiv6:dvh39D21PEc8Mdw6tOVAXs356

Score
1/10

Malware Config

Signatures

  • Modifies registry class 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\AvastSvcZEg.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:5048
  • C:\Windows\system32\BackgroundTransferHost.exe
    "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13
    1⤵
    • Modifies registry class
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\BackgroundTransferApi\afd83052-05b4-45f8-839b-3d166ef66c3a.down_data
    Filesize

    555KB

    MD5

    5683c0028832cae4ef93ca39c8ac5029

    SHA1

    248755e4e1db552e0b6f8651b04ca6d1b31a86fb

    SHA256

    855abd360d8a8d6974eba92b70cbd09ce519bc8773439993f9ab37cb6847309e

    SHA512

    aba434bd29be191c823b02ea9b639beb10647bbe7759bbffdaa790dfb1ec2c58d74c525ef11aacda209e4effe322d1d3a07b115446c8914b07a3bce4d8a0e2c3

    Download Submit