Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    46s
  • max time network
    75s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2022, 09:55

General

  • Target

    c76a45eceebdc3eb361cffe48603390cbb6bab4d2033b37d0f48bbaa8da64013.exe

  • Size

    529KB

  • MD5

    e6986f8754c0210ac06ae0eebfb3f8d1

  • SHA1

    092e6e4ae0308571e4d7c35cc508889f6cb8a019

  • SHA256

    c76a45eceebdc3eb361cffe48603390cbb6bab4d2033b37d0f48bbaa8da64013

  • SHA512

    2a316dfdf3b05e6b2ffe156bf79a736510aacbe5fdae33007b550b25d2db744483b6ca70246234dd010032fe7b86f1dc1b3ce602c79aff2da9e1b6e7a32ab06d

  • SSDEEP

    6144:V2ZJmauJrCTmpsQd4+W8a23SdaUD/W1YaXrQXFBI0EUIP6eaP8w55keL:V2Z76CTm9u80RDuud36G0AD

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c76a45eceebdc3eb361cffe48603390cbb6bab4d2033b37d0f48bbaa8da64013.exe
    "C:\Users\Admin\AppData\Local\Temp\c76a45eceebdc3eb361cffe48603390cbb6bab4d2033b37d0f48bbaa8da64013.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1004
    • C:\Users\Admin\AppData\Local\Temp\c76a45eceebdc3eb361cffe48603390cbb6bab4d2033b37d0f48bbaa8da64013.exe
      start
      2⤵
        PID:1548
      • C:\Users\Admin\AppData\Local\Temp\c76a45eceebdc3eb361cffe48603390cbb6bab4d2033b37d0f48bbaa8da64013.exe
        watch
        2⤵
          PID:1600

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1004-54-0x0000000075211000-0x0000000075213000-memory.dmp

        Filesize

        8KB

      • memory/1004-59-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1548-60-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1548-62-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1600-61-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1600-63-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB