Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    24s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    20/09/2022, 07:18 UTC

General

  • Target

    1876-99-0x0000000000400000-0x000000000042F000-memory.exe

  • Size

    188KB

  • MD5

    7cc3699d07bf302f14e030e954ec2a40

  • SHA1

    ddea26d7d6b3dde90988081165f8a4646416a372

  • SHA256

    6c56cbdc773586e53b07bd6bedaa1511f5b2826718c6c78594e406bdf8dd92c4

  • SHA512

    21228d9a71f76c594c8941b0295a3306ac1fe912a1a3f2fd948d0c2a098c4bc81a0bf604d63316aa8c3d33ee17accf045d3da4cffa0017381ab8ef2619801df6

  • SSDEEP

    3072:JyHN9B0BtzKLmIdNW7Rjyo1BnxuhsLZGaaRIbYCMtRQZe1IZcn+3fa7EU:Ju9ktWyIdiRxZxMaZGaSIsCMtRQZHZcv

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1876-99-0x0000000000400000-0x000000000042F000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1876-99-0x0000000000400000-0x000000000042F000-memory.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2012
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2012 -s 36
      2⤵
      • Program crash
      PID:1952

Network

    No results found
  • 72.21.91.29:80
    46 B
    40 B
    1
    1
No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.