Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
31.rar
windows7-x64
71.rar
windows10-2004-x64
10oj3.exe
windows7-x64
10oj3.exe
windows10-2004-x64
10Config.ini
windows7-x64
1Config.ini
windows10-2004-x64
1interception.dll
windows7-x64
1interception.dll
windows10-2004-x64
1libcrypto-3-x64.dll
windows7-x64
1libcrypto-3-x64.dll
windows10-2004-x64
1onnxruntime.dll
windows7-x64
1onnxruntime.dll
windows10-2004-x64
1opencv_world490.dll
windows7-x64
1opencv_world490.dll
windows10-2004-x64
1Analysis
-
max time kernel
93s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2024, 21:12
Static task
static1
Behavioral task
behavioral1
Sample
1.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
0oj3.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
0oj3.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Config.ini
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Config.ini
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
interception.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
interception.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
libcrypto-3-x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
libcrypto-3-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
onnxruntime.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
onnxruntime.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
opencv_world490.dll
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
opencv_world490.dll
Resource
win10v2004-20241007-en
General
-
Target
1.rar
-
Size
52.2MB
-
MD5
59f794fea5bfd53feb55c754cf2b1a52
-
SHA1
2878304c317d05daff6f30de640ab64742b2dd77
-
SHA256
0c4b7a3670f4ef5f7ba2d7e820cb3df837a72c08a4d039768b50617c06983308
-
SHA512
2b48c5160a7d2ec0c67c1ed119e666a8a509f64b43f94835a77041e58d025dfcc0df7a969d2cf83c9a1453fd9e5f0f4fadaf7975c4e1255b89f866fac785fc6b
-
SSDEEP
786432:SRbg1VYxvtPUpHOL7Of0Ub+yoAoxGfMvJLniIroQtC311gqkYdGYD0AWWQQHp22C:SBTdL6f0UbnoA+LzZgqxQHQQs2pemJC
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2836 7zFM.exe Token: 35 2836 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2836 7zFM.exe