Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
18/01/2025, 03:23
250118-dxx7ea1nbz 1018/01/2025, 03:15
250118-dsb4da1mbz 1018/01/2025, 03:07
250118-dmj7ss1qbr 10Analysis
-
max time kernel
32s -
max time network
34s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250113-es -
resource tags
arch:x64arch:x86image:win10ltsc2021-20250113-eslocale:es-esos:windows10-ltsc 2021-x64systemwindows -
submitted
18/01/2025, 03:07
Behavioral task
behavioral1
Sample
Monster Hunter World v20200109-v20231017 Plus 67 Trainer.rar
Resource
win10ltsc2021-20250113-es
3 signatures
60 seconds
General
-
Target
Monster Hunter World v20200109-v20231017 Plus 67 Trainer.rar
-
Size
795KB
-
MD5
675b9dabc2002039f0b449dfb269492a
-
SHA1
d50ab5d9a497e71840cdbd9a390f76a51091b2d5
-
SHA256
362eb9cbbc9e8c6b6215887d37a09e08c5110609d9b940975ab6ba5c5c7b34ba
-
SHA512
93ea1ff10968acc9eef4942e112aac2ca2ad275e52f98b1f13e7bf57972f23391a95f838636be9f6ae1aea8b205e0daf3a788a08989d27668c950c9357648e6a
-
SSDEEP
24576:NjgQYEDfEqbuZYdfW14d7yRPaaGDgRCJ2IHaIfIg:NjgQ9fBqofW14xyk8gJprfIg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4104 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 4104 7zFM.exe Token: 35 4104 7zFM.exe Token: SeSecurityPrivilege 4104 7zFM.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4104 7zFM.exe 4104 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Monster Hunter World v20200109-v20231017 Plus 67 Trainer.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4104