Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
32s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
06/02/2025, 14:57
Static task
static1
Behavioral task
behavioral1
Sample
AppSetup(Val0Updated).rar
Resource
win7-20240903-en
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
AppSetup(Val0Updated).rar
Resource
win10v2004-20250129-en
2 signatures
600 seconds
Errors
Reason
Machine shutdown
General
-
Target
AppSetup(Val0Updated).rar
-
Size
79.7MB
-
MD5
b254b2593bebe886a63cb85f852d0e68
-
SHA1
0de3dd2f71ad561f35e790aeb875af584a4535fa
-
SHA256
52ee0e34f2e2c814ceb5b59b6fdf9b6f7a86d097e76e73a92085304f62044678
-
SHA512
45b79a11fb6b96ce0f5243d50cd9287dc80c73d8f9d3875fcc06908ad069ac310aacd992d13347ebcdc067c6e36ce329216fb7a5a509e7bd8fbc94416696cdd2
-
SSDEEP
1572864:MVieG6yP2+5w0fZJVHO5nhVKGPQWtDrKwCn0wZaeAfRvDPi51tfcQFIMQ:0ieG6ypu0fjVHuVnRDrKfHVAfBDPiLib
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2972 7zFM.exe Token: 35 2972 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2972 7zFM.exe