Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
21s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
20/10/2022, 20:09
General
-
Target
6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe
-
Size
249KB
-
MD5
a04e1b4118201757b3d23d7a48225272
-
SHA1
72fc52037e65ef0e4b65c922c97a08907c09699e
-
SHA256
6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5
-
SHA512
2f13fc7947e0589ab7cf93cc37563395ba5c468e11da305a2e1561db593eaf23b7f643c0af74240fd5d9d416fc98cad4c8d14bcf7fc97cfd0d42ff1bbc4dafb1
-
SSDEEP
3072:zM/QeUBEVGhzgUOdg0D5MPTdf/sTnngFEaY/uKV0RllllD0:6QeURhz5GD58icE7/uTllll
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe"C:\Users\Admin\AppData\Local\Temp\6b6521e6ba7851e8f1d9ee874dc045903b87d1feaeffd7fbc98fd38f1b730fd5.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
332KB
-
Filesize
124KB
-
Filesize
332KB
-
Filesize
124KB