Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

0323b4326b...02.exe

windows7_x64

10

0323b4326b...02.exe

windows10_x64

10

0898a80dc2...92.exe

windows7_x64

10

0898a80dc2...92.exe

windows10_x64

10

0aaecf7f77...91.exe

windows7_x64

10

0aaecf7f77...91.exe

windows10_x64

10

150e8ef3f1...02.exe

windows7_x64

10

150e8ef3f1...02.exe

windows10_x64

10

23e95ba676...7f.exe

windows7_x64

10

23e95ba676...7f.exe

windows10_x64

10

28e7dc4aeb...33.exe

windows7_x64

28e7dc4aeb...33.exe

windows10_x64

10

350b0d6ae2...d7.exe

windows7_x64

1

350b0d6ae2...d7.exe

windows10_x64

1

3a6ebac4f8...ca.exe

windows7_x64

10

3a6ebac4f8...ca.exe

windows10_x64

10

3fe801df14...4f.exe

windows7_x64

8

3fe801df14...4f.exe

windows10_x64

8

41367ad447...00.exe

windows7_x64

10

41367ad447...00.exe

windows10_x64

10

48f4749f13...77.exe

windows7_x64

1

48f4749f13...77.exe

windows10_x64

1

499d936c22...82.exe

windows7_x64

10

499d936c22...82.exe

windows10_x64

10

4b5a6926ab...d1.exe

windows7_x64

1

4b5a6926ab...d1.exe

windows10_x64

1

4bb0d8eb6b...81.exe

windows7_x64

10

4bb0d8eb6b...81.exe

windows10_x64

10

5de3d5a337...ed.exe

windows7_x64

10

5de3d5a337...ed.exe

windows10_x64

10

5e2b2fe65d...20.exe

windows7_x64

1

5e2b2fe65d...20.exe

windows10_x64

3

Analysis

  • max time kernel
    150s
  • max time network
    93s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    30/03/2021, 11:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4b5a6926ab9b487fca2d33ba00b4e25f731bc52a3222a6ef3141b8703c1e2cd1.exe

  • Size

    253KB

  • MD5

    d57bb1c7e710dbae2444505a2127f6ac

  • SHA1

    26b98cf0f844ebf5ca0ff2d8f9c572a90c8e9c1a

  • SHA256

    4b5a6926ab9b487fca2d33ba00b4e25f731bc52a3222a6ef3141b8703c1e2cd1

  • SHA512

    ccf3520d9634755a9e270fde3267776f0fcfa0f73a26a951439f2e7ade52a73b5c20207bf270e18fdf9042033cf45cc3de1842fe3a4529232a36f1b665753766

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b5a6926ab9b487fca2d33ba00b4e25f731bc52a3222a6ef3141b8703c1e2cd1.exe
    "C:\Users\Admin\AppData\Local\Temp\4b5a6926ab9b487fca2d33ba00b4e25f731bc52a3222a6ef3141b8703c1e2cd1.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1828
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c color 0A
      2⤵
        PID:2004

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads