Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
9s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 21:30
Static task
static1
Behavioral task
behavioral1
Sample
ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe
Resource
win10v2004-20220812-en
General
-
Target
ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe
-
Size
76KB
-
MD5
850130ca3b04ea36b23ee3ae97d64d30
-
SHA1
cc8ec263d0fac59c3d740591ddfe0949394af057
-
SHA256
ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759
-
SHA512
3fdb3304271f35b94db74b3c0a778d7b673fec0f4eb33441e14c39823633c2141348113e3336a78e4725360fd88eab1efa53a8a93b2d5973e9bcc62c55947346
-
SSDEEP
1536:mmHUH2XVXt3gxUyu13m2Pc1MNpjVrs2ryrd1vUQuq6:XVXt3gxUb3PcyNHs2qo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1756 904 WerFault.exe 26 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 904 wrote to memory of 1756 904 ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe 28 PID 904 wrote to memory of 1756 904 ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe 28 PID 904 wrote to memory of 1756 904 ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe 28 PID 904 wrote to memory of 1756 904 ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe"C:\Users\Admin\AppData\Local\Temp\ccf355dca9e24f8f32a4c7a7f7cb25f9347d8beecea18e406dd43c0a5904f759.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:904 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 904 -s 362⤵
- Program crash
PID:1756
-