Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    41s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 06:18

General

  • Target

    755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe

  • Size

    290KB

  • MD5

    082dfc13fbebb8c3bdc04922365dff10

  • SHA1

    d1c56dc347cb5862fedceda4c913e020e704a521

  • SHA256

    755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954

  • SHA512

    57b06bdbfa973ba97eebd3097a140ff958426c060569fd2518af762f18f16f2eb9f45758d2c7beb663fcc0dd3cc32f947fafd936c092e08c39c234bab02db4c1

  • SSDEEP

    6144:PE5MoPGxbzNPO2h+Svmdf8T0SbOYxtQjycDFq8:PqsJzN22PkQ1jmq8

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe
    "C:\Users\Admin\AppData\Local\Temp\755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Users\Admin\AppData\Local\Temp\755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe
      tear
      2⤵
        PID:1928

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1928-58-0x0000000000400000-0x000000000045D000-memory.dmp

      Filesize

      372KB

    • memory/1928-59-0x0000000000400000-0x000000000045D000-memory.dmp

      Filesize

      372KB

    • memory/1948-54-0x0000000076031000-0x0000000076033000-memory.dmp

      Filesize

      8KB

    • memory/1948-56-0x0000000000400000-0x000000000045D000-memory.dmp

      Filesize

      372KB