Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/02/2025, 21:34
Behavioral task
behavioral1
Sample
cheat 5.2.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cheat 5.2.rar
Resource
win10v2004-20250207-en
Behavioral task
behavioral3
Sample
cheat 5.2.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
cheat 5.2.exe
Resource
win10v2004-20250207-en
Behavioral task
behavioral5
Sample
Инструкция (2).txt
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Инструкция (2).txt
Resource
win10v2004-20250207-en
General
-
Target
cheat 5.2.rar
-
Size
280KB
-
MD5
4ced03c83c90ef37d8596e0bdc55a2c9
-
SHA1
9ebe3eb44c700621119e818539d3e514028b74d3
-
SHA256
cf824d6763ef3b4488620ba95f63ed0e99001fbf83aa6242d6d680fb941b5d1c
-
SHA512
caf779d37de9c3ba5ef7003e4bb1496bd7a91dc477d7a75543c97638496ac03d8b16092c1448146df8fac545f097d8b3799056a365a5489d7840473c3313398b
-
SSDEEP
6144:aIJsegu+PlWOpoBIrB56rYOV4XQ8Xo1v1/OzUtlDpNnHmP/lYuMD7C:L7gu2lhyNrYO78YH/O4BLnHmP/lYuOC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2024 7zFM.exe Token: 35 2024 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2024 7zFM.exe