Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
37s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
04/11/2022, 05:40
Behavioral task
behavioral1
Sample
27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe
Resource
win10v2004-20220812-en
General
-
Target
27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe
-
Size
141KB
-
MD5
142b7627b535f5b094d67d29cdc01ff3
-
SHA1
345ac856c2e0199d5cb7fdf00ed6c886be38863e
-
SHA256
27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4
-
SHA512
85d388c623570f1bc886861da1133f765a10637ac73ddc0d2606fb3a4a7a7ffe1f6bf3a20342ec47b1398d5713e7a0d84956332bb080eb57258aaefaf43021f2
-
SSDEEP
3072:m5tmM+mBqQHTUs4QL1nMqqDL2/OPvdlo:m5t3Nj4QL1MqqDL6svdlo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1976 1372 WerFault.exe 25 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1372 wrote to memory of 1976 1372 27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe 26 PID 1372 wrote to memory of 1976 1372 27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe 26 PID 1372 wrote to memory of 1976 1372 27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe 26 PID 1372 wrote to memory of 1976 1372 27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe 26
Processes
-
C:\Users\Admin\AppData\Local\Temp\27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe"C:\Users\Admin\AppData\Local\Temp\27fd9a4c557195b7044f74f89f21d7c070a2dcf68020217852293263bc305ba4.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1372 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 362⤵
- Program crash
PID:1976
-