Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
63s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
18/01/2025, 00:18
Static task
static1
Behavioral task
behavioral1
Sample
Launcher_v1.4.9.9.zip
Resource
win7-20240729-en
General
-
Target
Launcher_v1.4.9.9.zip
-
Size
3.7MB
-
MD5
dfdc538af7b3a8dc317b9b50b17bf423
-
SHA1
6da6ff1cd6f46df9ae09cf6b4cfa4c88fceefef9
-
SHA256
db1ac1bbba4f280c0ca239bba2755dafe72d050d9e5d56a577ee0a7660fc6ced
-
SHA512
84615e07412c7765fa6169ec4538be739da065405ed2f714888e767a252ab122ada4949f02f6b6b147047006aa749ea045ccbfe8bf20ef5a3c6314ae090208f9
-
SSDEEP
98304:u71Rr0JbetMI2xgGallTTs9z3fw57FKhy6nZyQXmbtMAdczX:41x0JbetM5Cxls9ja7FKh3cd0
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1172 7zFM.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1172 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 1172 7zFM.exe Token: 35 1172 7zFM.exe Token: SeSecurityPrivilege 1172 7zFM.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1172 7zFM.exe 1172 7zFM.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1172 wrote to memory of 2952 1172 7zFM.exe 30 PID 1172 wrote to memory of 2952 1172 7zFM.exe 30 PID 1172 wrote to memory of 2952 1172 7zFM.exe 30
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Launcher_v1.4.9.9.zip"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1172 -
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\7zO4942DFA7\Read me.txt2⤵PID:2952
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
21B
MD51b1001b50ec2880a656a82884ea99075
SHA117d5379e1443cde363639d8eb7787db842307aef
SHA2569e47d314de104ec433194891d99eac4b24344730d4b87c5ecc85b49b0f645794
SHA512d6e42565573e64be48741151019ba1240f8676cd8102f18fa029be91b3d315865535768d7fee783882c3be9642c818223606e2d1d352955093276498955b1777