Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/01/2025, 23:59

General

  • Target

    !Ǵe𝔱-Set_𝓤p--5311__Pǎ$$w0ɾD#!!.zip

  • Size

    1.4MB

  • MD5

    dbf1c5395b24389294ec390632ba4b99

  • SHA1

    8a258b84022b1b6ff8fa66b659d713d8c4111380

  • SHA256

    3bd077d4a567bcd7074d878a15d52e0763d3f2ce83a7241dda11209f0aaf0a08

  • SHA512

    36985225872a57d1d525ae476333e4d88c4b2e420e43ed51e57174260f3a4bca5b53fe6181ba1f2d63250748bc32633acf4f4ea07a152433d81031539746ae3c

  • SSDEEP

    24576:GqvhoOFPLS9/OxEBwgPGliLEh2Z58qqEKwwzr9v23jS:3vrFPLsPvo2EfEK3zr9/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\!Ǵe𝔱-Set_𝓤p--5311__Pǎ$$w0ɾD#!!.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:3976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads