Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    63s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2025, 00:18

General

  • Target

    Launcher_v1.4.9.9.zip

  • Size

    3.7MB

  • MD5

    dfdc538af7b3a8dc317b9b50b17bf423

  • SHA1

    6da6ff1cd6f46df9ae09cf6b4cfa4c88fceefef9

  • SHA256

    db1ac1bbba4f280c0ca239bba2755dafe72d050d9e5d56a577ee0a7660fc6ced

  • SHA512

    84615e07412c7765fa6169ec4538be739da065405ed2f714888e767a252ab122ada4949f02f6b6b147047006aa749ea045ccbfe8bf20ef5a3c6314ae090208f9

  • SSDEEP

    98304:u71Rr0JbetMI2xgGallTTs9z3fw57FKhy6nZyQXmbtMAdczX:41x0JbetM5Cxls9ja7FKh3cd0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Launcher_v1.4.9.9.zip"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:1172
    • C:\Windows\system32\NOTEPAD.EXE
      "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\7zO4942DFA7\Read me.txt
      2⤵
        PID:2952

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\7zO4942DFA7\Read me.txt

      Filesize

      21B

      MD5

      1b1001b50ec2880a656a82884ea99075

      SHA1

      17d5379e1443cde363639d8eb7787db842307aef

      SHA256

      9e47d314de104ec433194891d99eac4b24344730d4b87c5ecc85b49b0f645794

      SHA512

      d6e42565573e64be48741151019ba1240f8676cd8102f18fa029be91b3d315865535768d7fee783882c3be9642c818223606e2d1d352955093276498955b1777