Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26/01/2025, 08:46
Behavioral task
behavioral1
Sample
edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe
-
Size
1.6MB
-
MD5
09d13ec9b8366ae5be8fb4f13992bf24
-
SHA1
3e1b5f57410b9443f5065796f1a141200147119f
-
SHA256
edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277
-
SHA512
a459f321bad5152bced7a6a911c577c39c626f6e09a24be9342578cd2622b90c9cf7b9e35f33df9679d1f4c53f0e5c02df446d16163ceeb2f7821e226826803a
-
SSDEEP
24576:r0yOdKnqj9MNrOoThmBZTsl3WaPECkDtGQjnEd7DSVXT5X1hnC:gSqj9MxOt83J/kwonPXT5X1hC
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe Token: SeDebugPrivilege 1116 edaca78bc624a4098d521f4aef2b50a934c5c4e32e5e45b1bbe7058f173c8277.exe