Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

64da8faf12...cd.exe

windows7-x64

8

64da8faf12...cd.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    41s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 23:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    64da8faf127400bd268fa3605f30fc1fa74e5365e79fba42346dff3923d229cd.exe

  • Size

    404KB

  • MD5

    064d1630dfcc620f0632856805d86bec

  • SHA1

    52313bed2302a45d985099eb6752e8b10e10e88e

  • SHA256

    64da8faf127400bd268fa3605f30fc1fa74e5365e79fba42346dff3923d229cd

  • SHA512

    160cd6ee3dbf055ec26f5844cda9f6c8dc163295a890f39519f0330139381849f19ee7cb0f12dba47b013a1f97c6aa5592e0f658b54199c86ceda50c7379de86

  • SSDEEP

    6144:P87+LaxrSm3P4NXouMF2VC4K4dwfZtIb6UKTblN5zMCycMq5jgFrayF9vqJ2eM9A:pWxrSmGMd4KKAZt+4HH/MYKrbFehgm35

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Processes

  • C:\Users\Admin\AppData\Local\Temp\64da8faf127400bd268fa3605f30fc1fa74e5365e79fba42346dff3923d229cd.exe
    "C:\Users\Admin\AppData\Local\Temp\64da8faf127400bd268fa3605f30fc1fa74e5365e79fba42346dff3923d229cd.exe"
    1⤵
      PID:1132

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1132-54-0x0000000000400000-0x000000000046A000-memory.dmp

      Filesize

      424KB

      Download