Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

Nitro-Gene...in.zip

windows7-x64

1

Nitro-Gene...in.zip

windows10-2004-x64

1

Nitro-Gene...ICENSE

windows7-x64

1

Nitro-Gene...ICENSE

windows10-2004-x64

1

Nitro-Gene...g.json

windows7-x64

3

Nitro-Gene...g.json

windows10-2004-x64

3

Nitro-Gene...es.txt

windows7-x64

1

Nitro-Gene...es.txt

windows10-2004-x64

1

Nitro-Gene...ain.py

windows7-x64

3

Nitro-Gene...ain.py

windows10-2004-x64

3

Nitro-Gene...dme.md

windows7-x64

3

Nitro-Gene...dme.md

windows10-2004-x64

3

Nitro-Gene...ts.txt

windows7-x64

1

Nitro-Gene...ts.txt

windows10-2004-x64

1

Nitro-Gene...it.txt

windows7-x64

1

Nitro-Gene...it.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    17/11/2024, 01:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Nitro-Generator-main.zip

  • Size

    16KB

  • MD5

    644f2032041dce1fb10a2cfd7521018a

  • SHA1

    e187565156d3a1874e40c294bcce33e2a5a93daf

  • SHA256

    7e9c81789e1ea9d8f034ebb76c2fb57852c162145220db9bcce2522b6f8c9551

  • SHA512

    30670f6facbb96f6e30325e2d8f0351d0611018302938051e4c9c5a335263f231a0d3d5f014477e00c75d400bf0ebcfb359117ec04128219e364af5b9e825762

  • SSDEEP

    384:KVbCEh/70cpShMoU8bbL92+hVCMF85hW8IcwY25bHWrYOJ:aCER7pNX8nL9XhVCMFEWncwN5bHWrtJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Nitro-Generator-main.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:276
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2692
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2240

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\Nitro-Generator-main\config\proxies.txt
        Filesize

        1B

        MD5

        68b329da9893e34099c7d8ad5cb9c940

        SHA1

        adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

        SHA256

        01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

        SHA512

        be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

        Download Submit