Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    30s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2022, 22:58

General

  • Target

    2405bd430317ac676232365b8230b89e5f30b3c235c71b8725b2621d7a99be50.exe

  • Size

    51KB

  • MD5

    4bc665eb38e3a460f0df50b39d8f31e0

  • SHA1

    198405d4ebb934c80c5543271c1b65b7acadf05f

  • SHA256

    2405bd430317ac676232365b8230b89e5f30b3c235c71b8725b2621d7a99be50

  • SHA512

    3a54591a2de4b8a6e47c486303754e95ff40b33324dc3d2be8e427afc8b553dc6fc04f794ea7fea5e5468b88bbb47bdbd51cb8f403e2ebd194c827b67a7ce206

  • SSDEEP

    1536:dwRhNYZpgpuFeRRw7L6UBEvaaTrCCOsFqk7p:GdYZbFeLw7L6UivamTOscg

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2405bd430317ac676232365b8230b89e5f30b3c235c71b8725b2621d7a99be50.exe
    "C:\Users\Admin\AppData\Local\Temp\2405bd430317ac676232365b8230b89e5f30b3c235c71b8725b2621d7a99be50.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:668
    • C:\Windows\Explorer.EXE
      C:\Windows\Explorer.EXE
      2⤵
        PID:1712

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/668-54-0x0000000001000000-0x000000000100F000-memory.dmp

      Filesize

      60KB

    • memory/668-57-0x0000000001000000-0x000000000100F000-memory.dmp

      Filesize

      60KB

    • memory/1712-56-0x000007FEFB7B1000-0x000007FEFB7B3000-memory.dmp

      Filesize

      8KB