Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    45s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2022, 09:54

General

  • Target

    fizruk_2_sezon_20_seriya_iz_20_2014_web-dl_720p_tfile_ru_6.exe

  • Size

    529KB

  • MD5

    c2b81325b17d2523468bbbd450831893

  • SHA1

    dfe82e9a503baaf00696de2a9db4c4108d8bcbf0

  • SHA256

    0431fb7319751796e3b9462694e73c4b5c8d2466dbcbda727ba98bd8f0fef080

  • SHA512

    aec9073d93f3df83368e560e9351d50292aa751614208c12666ce5c7b2dbab3ed2919c578d092c269fa6d32b065a65b725c34b3fd60342547aeea87852998de0

  • SSDEEP

    6144:S2ZwP98QkE/3tGR8Ln9jmErAswuCm4MgG4JcUNFWk5ftY8VGABI0EUIP63aP8xrI:S2ZwPuSXikemFUVtY8Vj650xr9O

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fizruk_2_sezon_20_seriya_iz_20_2014_web-dl_720p_tfile_ru_6.exe
    "C:\Users\Admin\AppData\Local\Temp\fizruk_2_sezon_20_seriya_iz_20_2014_web-dl_720p_tfile_ru_6.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1600
    • C:\Users\Admin\AppData\Local\Temp\fizruk_2_sezon_20_seriya_iz_20_2014_web-dl_720p_tfile_ru_6.exe
      start
      2⤵
        PID:1352
      • C:\Users\Admin\AppData\Local\Temp\fizruk_2_sezon_20_seriya_iz_20_2014_web-dl_720p_tfile_ru_6.exe
        watch
        2⤵
          PID:1420

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1352-61-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1352-62-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1420-60-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1420-63-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB

      • memory/1600-54-0x00000000752B1000-0x00000000752B3000-memory.dmp

        Filesize

        8KB

      • memory/1600-59-0x0000000000400000-0x000000000048A000-memory.dmp

        Filesize

        552KB