Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    36s
  • max time network
    76s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 07:42

General

  • Target

    876f0b1f1614ea4f756e808ae0678c70817146b4d079d0985dd19d7a9fd827ce.exe

  • Size

    522KB

  • MD5

    90a379d925b1041a3d8dbdb244a15fd0

  • SHA1

    077ae249634b968bde4ba7664769a3e3f78f8ba2

  • SHA256

    876f0b1f1614ea4f756e808ae0678c70817146b4d079d0985dd19d7a9fd827ce

  • SHA512

    b1e0e195da90813b3e1182da26b06aabce8765e2564abedda3b15dd3fec888efa2d5ac325b8157c15582485f7a459f88e2eaeb4b6645fafc30bcdeacc4f109f2

  • SSDEEP

    12288:fUxBf2/Mcmqa3mheG+20eAgy18xQqpx8O5V:MxBehha3ip+200atqpx8

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\876f0b1f1614ea4f756e808ae0678c70817146b4d079d0985dd19d7a9fd827ce.exe
    "C:\Users\Admin\AppData\Local\Temp\876f0b1f1614ea4f756e808ae0678c70817146b4d079d0985dd19d7a9fd827ce.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1460
    • C:\Users\Admin\AppData\Local\Temp\876f0b1f1614ea4f756e808ae0678c70817146b4d079d0985dd19d7a9fd827ce.exe
      start
      2⤵
        PID:928
      • C:\Users\Admin\AppData\Local\Temp\876f0b1f1614ea4f756e808ae0678c70817146b4d079d0985dd19d7a9fd827ce.exe
        watch
        2⤵
          PID:316

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/316-60-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/316-68-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/316-66-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/316-64-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/928-59-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/928-62-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/928-65-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/928-67-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/1460-54-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/1460-58-0x0000000000400000-0x000000000048C000-memory.dmp

        Filesize

        560KB

      • memory/1460-55-0x0000000075D01000-0x0000000075D03000-memory.dmp

        Filesize

        8KB