Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

c545eab9c8...b6.exe

windows7-x64

1

c545eab9c8...b6.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 07:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6.exe

  • Size

    251KB

  • MD5

    3ead0601160c71c5e85c7177af1bc880

  • SHA1

    d3908eb4d376b568a8155bf52fa28a4424e9fe34

  • SHA256

    c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6

  • SHA512

    252aabcba1b9c7aa562c8bacc22e573100f7605236140e85d6074d903d5b0ac2b1ab21f4d0210bb423663bfbcaeca39c6df2170b9259029a38b23cf73a4f973b

  • SSDEEP

    1536:Ev+1ajg59V5VsPW7AvosJe8k8hkKGCGL2+AbyTWOGIaNWUhCE1HMwnVdfevQ:A+4gru+7Avo/usFq+UCW1IaEEiwnVQQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6.exe
    "C:\Users\Admin\AppData\Local\Temp\c545eab9c8f2c3c58d9dd2fb3db09f6e568fcd17eda6f153cda1ca7b74c542b6.exe"
    1⤵
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of WriteProcessMemory
    PID:384
    • C:\Windows\SysWOW64\svchost.exe
      svchost.exe
      2⤵
        PID:4636

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/384-133-0x0000000000540000-0x0000000000553000-memory.dmp

      Filesize

      76KB

      Download

    • memory/384-134-0x0000000000400000-0x0000000000413000-memory.dmp

      Filesize

      76KB

      Download

    • memory/4636-137-0x0000000000950000-0x00000000009D0000-memory.dmp

      Filesize

      512KB

      Download

    • memory/4636-136-0x00000000001C0000-0x00000000001D1000-memory.dmp

      Filesize

      68KB

      Download

    • memory/4636-135-0x0000000000A30000-0x0000000000A3E000-memory.dmp

      Filesize

      56KB

      Download