Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
07/11/2022, 19:20
Static task
static1
Behavioral task
behavioral1
Sample
a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe
Resource
win7-20220812-en
2 signatures
150 seconds
General
-
Target
a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe
-
Size
188KB
-
MD5
02de34e16838efc9fc4c6606877499eb
-
SHA1
1202b3b242d61616ab23cab58acb39234750d821
-
SHA256
a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34
-
SHA512
a95ac889ee60564c6bd7367231610f763e6271cabe1d83d84b32f6cd121c0a1741c4ca617d29e193e1346bd8c5a9c6e0c08f5e9bfde8167b36195c37d9136461
-
SSDEEP
3072:iE0QjAzXSjqPzBYNILDsi1C2a/7MCgQDsgBewLnVCju20v7etXmWuOVdhVsdMo3i:106AzXSjqBVtVUMo3V6K3XzSEBKdz
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1520 1628 WerFault.exe 15 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1628 wrote to memory of 1520 1628 a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe 27 PID 1628 wrote to memory of 1520 1628 a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe 27 PID 1628 wrote to memory of 1520 1628 a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe 27 PID 1628 wrote to memory of 1520 1628 a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe"C:\Users\Admin\AppData\Local\Temp\a1080f0f95cdf05e8bf231c7962f6b6703f2a3fae1069cd0c276a2a36261ce34.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1628 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 1402⤵
- Program crash
PID:1520
-