Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    15s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2022, 11:52

General

  • Target

    8a685cf57e73de6b19a5c8ec82fa5367a9670ea5c2e3bd16c87b97688c542e71.exe

  • Size

    42KB

  • MD5

    0d4e7b2b16b14e71cdd80be8650ee946

  • SHA1

    3061f2fc428ca3c44ef9187e1d73067ef228ca4f

  • SHA256

    8a685cf57e73de6b19a5c8ec82fa5367a9670ea5c2e3bd16c87b97688c542e71

  • SHA512

    cf28a4d256349b4e144a6bc9f14925dbd9b7f5f48486f2b3cd56f17d5d4b544dbe933f6c1713ab3954cb1c6cf787c71526ded38cdd8444bc0eee3ec10c58dab8

  • SSDEEP

    384:/QhFCosuCYat74Q1pVFmPxq7vvUEvQ2qvl1cG6N0sZBCfFJBlTwavTg5oim2e+dk:QJHfaSSpwq7vvFlt/ef/hvMoim2e+2

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a685cf57e73de6b19a5c8ec82fa5367a9670ea5c2e3bd16c87b97688c542e71.exe
    "C:\Users\Admin\AppData\Local\Temp\8a685cf57e73de6b19a5c8ec82fa5367a9670ea5c2e3bd16c87b97688c542e71.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1628
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 36
      2⤵
      • Program crash
      PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads