Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

f01e1d98fc...95.exe

windows7-x64

1

f01e1d98fc...95.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    125s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 13:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f01e1d98fc53a72d967c3342a5107f9916caff99c15c8f15206fede44e6a4295.exe

  • Size

    56KB

  • MD5

    24d54bf8ce70744fbcf342b51b26be71

  • SHA1

    00467c08708c54290b71d7df8fa1092013692475

  • SHA256

    f01e1d98fc53a72d967c3342a5107f9916caff99c15c8f15206fede44e6a4295

  • SHA512

    ad9cb703029d9c492f27172a053016ba865ad1623c1e3bd5958bde7bfc9262d9879101ad607f125d1b985c9082cdf31eda619cdfb72f61138e6ec79a80ade2dc

  • SSDEEP

    768:Z+h7TzTBziifTeiZSVWihwEknc0L7OTLeNfQf803INstj5uomHM9BUibhX0X/mVp:kZ/nEkc8OTKN70YNkQGBUibhXUW1CRto

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f01e1d98fc53a72d967c3342a5107f9916caff99c15c8f15206fede44e6a4295.exe
    "C:\Users\Admin\AppData\Local\Temp\f01e1d98fc53a72d967c3342a5107f9916caff99c15c8f15206fede44e6a4295.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:1564
  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:2864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1564-132-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

      Download

    • memory/1564-134-0x0000000010000000-0x0000000010013000-memory.dmp

      Filesize

      76KB

      Download

    • memory/1564-135-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

      Download

    • memory/2864-133-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

      Filesize

      28KB

      Download