Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ForceAdmin.exe

windows7-x64

1

ForceAdmin.exe

windows10-2004-x64

1

New Text Document.ps1

windows7-x64

8

New Text Document.ps1

windows10-2004-x64

10

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18/11/2024, 15:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ForceAdmin.exe

  • Size

    309KB

  • MD5

    14938582caf4bbc6b2af665ca31fd60c

  • SHA1

    289a2d81be847f58051891bf58b9699acd124874

  • SHA256

    75eacbca3054af7502185379ce007e6dafb968dee4a29a0b17b2890aa12ebdc7

  • SHA512

    3e40a71ab736e0156c2d1f18abb3b3b54314df0985041dd2a900e753b154c083340121a4c2a3d8820f73f608a21958dff71c73379509e08afecc2ac9388f5414

  • SSDEEP

    6144:DX3IbK3TbvRsOANGkNPb/T+H6yjB4y1J3+C3L0ZOl7J5J4xm7o8Hy:T35RsOdkNbT+HVBRJ3+C3YZOfr2m7PHy

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ForceAdmin.exe
    "C:\Users\Admin\AppData\Local\Temp\ForceAdmin.exe"
    1⤵
      PID:1088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1088-0-0x000007FEF53C3000-0x000007FEF53C4000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1088-1-0x0000000000030000-0x0000000000082000-memory.dmp

      Filesize

      328KB

      Download

    • memory/1088-2-0x000007FEF53C3000-0x000007FEF53C4000-memory.dmp

      Filesize

      4KB

      Download