Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 07:30

General

  • Target

    c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6.exe

  • Size

    251KB

  • MD5

    3ead0601160c71c5e85c7177af1bc880

  • SHA1

    d3908eb4d376b568a8155bf52fa28a4424e9fe34

  • SHA256

    c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6

  • SHA512

    252aabcba1b9c7aa562c8bacc22e573100f7605236140e85d6074d903d5b0ac2b1ab21f4d0210bb423663bfbcaeca39c6df2170b9259029a38b23cf73a4f973b

  • SSDEEP

    1536:Ev+1ajg59V5VsPW7AvosJe8k8hkKGCGL2+AbyTWOGIaNWUhCE1HMwnVdfevQ:A+4gru+7Avo/usFq+UCW1IaEEiwnVQQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious use of UnmapMainImage 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6.exe
    "C:\Users\Admin\AppData\Local\Temp\c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6.exe"
    1⤵
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of UnmapMainImage
    • Suspicious use of WriteProcessMemory
    PID:1184
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:2044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1184-56-0x0000000000250000-0x0000000000263000-memory.dmp

      Filesize

      76KB

    • memory/1184-57-0x0000000000400000-0x0000000000413000-memory.dmp

      Filesize

      76KB

    • memory/2044-55-0x0000000075A11000-0x0000000075A13000-memory.dmp

      Filesize

      8KB

    • memory/2044-58-0x0000000000AF0000-0x0000000000AF8000-memory.dmp

      Filesize

      32KB

    • memory/2044-59-0x00000000000C0000-0x00000000000D1000-memory.dmp

      Filesize

      68KB

    • memory/2044-60-0x00000000001E0000-0x0000000000260000-memory.dmp

      Filesize

      512KB