Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
06/11/2022, 06:34
General
-
Target
49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047.exe
-
Size
156KB
-
MD5
229dc1ade1394e2b787f65dc1f79ef74
-
SHA1
5af441c0754dfcef4fb1a613de1f8361319193ad
-
SHA256
49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047
-
SHA512
49c7b0e138a9a3cba16afa01a8532de13026bc385eb0f14ca2291c8229af62914a0ad976e5913c83b110c4a965a60017326b3f13e40bb1882852e34f558ee430
-
SSDEEP
3072:9zt90EpbBtcxXhIlldYt2xxaKUc7Ocxc236SHtraya6Y/YqY8t2Y7IS:Vt9rLtcxXOz40n36S9ayaJ/VY8t2Y7t
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047.exe"C:\Users\Admin\AppData\Local\Temp\49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047.exe"C:\Users\Admin\AppData\Local\Temp\49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2864 -s 123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2864 -ip 28641⤵