Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28/10/2022, 19:56

General

  • Target

    434bd65cc4399f6199bb1c4b81f1f81c70ee8522fabc2f34bcf22c3cddddd9e7.exe

  • Size

    249KB

  • MD5

    071b5014413ccfce3bfc822f7237e750

  • SHA1

    43914d39b394caa194860dafc3a9780171afc9b1

  • SHA256

    434bd65cc4399f6199bb1c4b81f1f81c70ee8522fabc2f34bcf22c3cddddd9e7

  • SHA512

    a2580d5815927949b17ad93b508fd7182d31c3db73ebaed35411223d896b404cb700c0ef40ca560eb8ff4f53cc8e298306d31100d9054e76de1e8ca67acc250f

  • SSDEEP

    3072:iKYjRMmLCH8RWp82tP5zoWv+tvADluRxnUtc0oYqqTqUujUe/zEzrRFiFwBY+pwK:+RM0dGP3+tqlCnUG0opqOlUazCtbB2E

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\434bd65cc4399f6199bb1c4b81f1f81c70ee8522fabc2f34bcf22c3cddddd9e7.exe
    "C:\Users\Admin\AppData\Local\Temp\434bd65cc4399f6199bb1c4b81f1f81c70ee8522fabc2f34bcf22c3cddddd9e7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1604
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1604 -s 264
      2⤵
      • Program crash
      PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1604-54-0x0000000075601000-0x0000000075603000-memory.dmp

    Filesize

    8KB

  • memory/1604-58-0x00000000001E0000-0x00000000001F6000-memory.dmp

    Filesize

    88KB

  • memory/1604-57-0x00000000001E0000-0x00000000001F6000-memory.dmp

    Filesize

    88KB

  • memory/1604-56-0x0000000000090000-0x00000000000A6000-memory.dmp

    Filesize

    88KB