Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
126s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19/12/2024, 04:16 UTC
General
-
Target
df22795e42488daabc77eeb96f724ea6df453ed2ebcae81db03993b560ed5ab3.exe
-
Size
4.8MB
-
MD5
deec0a7c5e6af53603b0171a0d7d5174
-
SHA1
15600a4e91ad83e4351c7a6a87e9102bb5998459
-
SHA256
df22795e42488daabc77eeb96f724ea6df453ed2ebcae81db03993b560ed5ab3
-
SHA512
e2809515a7ab66461144bcb746d16004df682cc93c92ee6874b876bc1307d62056ce780468ed179c782cf20027bfba4ca3867a04da6785e399eee0cbabeaf40a
-
SSDEEP
98304:DPNkPXSgzYO/Iy5OAWHd7NUEi2R5It2CR8aPA//WDPAslUMFBsyB:yPXS7R5y2CR8nOD1ltt
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\df22795e42488daabc77eeb96f724ea6df453ed2ebcae81db03993b560ed5ab3.exe"C:\Users\Admin\AppData\Local\Temp\df22795e42488daabc77eeb96f724ea6df453ed2ebcae81db03993b560ed5ab3.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
- No results found
-
185.215.113.117:3333 -
185.215.113.117:3333
-
185.215.113.117:3333
-
185.215.113.117:3333
-
185.215.113.117:3333
-
185.215.113.117:3333
No results found
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB