Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
41s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
07/11/2022, 06:18
Static task
static1
Behavioral task
behavioral1
Sample
755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe
Resource
win10v2004-20220812-en
General
-
Target
755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe
-
Size
290KB
-
MD5
082dfc13fbebb8c3bdc04922365dff10
-
SHA1
d1c56dc347cb5862fedceda4c913e020e704a521
-
SHA256
755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954
-
SHA512
57b06bdbfa973ba97eebd3097a140ff958426c060569fd2518af762f18f16f2eb9f45758d2c7beb663fcc0dd3cc32f947fafd936c092e08c39c234bab02db4c1
-
SSDEEP
6144:PE5MoPGxbzNPO2h+Svmdf8T0SbOYxtQjycDFq8:PqsJzN22PkQ1jmq8
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1948 wrote to memory of 1928 1948 755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe 28 PID 1948 wrote to memory of 1928 1948 755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe 28 PID 1948 wrote to memory of 1928 1948 755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe 28 PID 1948 wrote to memory of 1928 1948 755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe"C:\Users\Admin\AppData\Local\Temp\755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1948 -
C:\Users\Admin\AppData\Local\Temp\755a3112a907741018dc12be462d88bff0d6f1b84a37f694f82c668d1966f954.exetear2⤵PID:1928
-