Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
04/01/2025, 18:03
Static task
static1
Behavioral task
behavioral1
Sample
Release-x64.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Release-x64.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
README.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
README.txt
Resource
win10v2004-20241007-en
General
-
Target
Release-x64.zip
-
Size
19.6MB
-
MD5
25493ab271580066a0d5e8d43b25e055
-
SHA1
f2a8336d1e6a75233f796fe37ec00aa204fb6907
-
SHA256
5281883011b847e4ab3f68c7488a47fb8489ac802c558a2cb1e5bef588f06269
-
SHA512
41728fc89da12faca4fa738f5ef48cd1d7fd1c9b82151f9d011f4079611d0e7fdc7a06503a07a469a89b9de0424404b547bd89e5678da73a8dfa89668932deb1
-
SSDEEP
393216:oyzn8HaG+RVYNVwS8+1Kd7qI2R/Ri977qCWEyeEcTeuoIJKxoJe4B2:Zn8yV2Vw7+10qbKzEcquoAKxogM2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2320 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2320 7zFM.exe Token: 35 2320 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2320 7zFM.exe