Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    243s
  • max time network
    334s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    29/11/2022, 12:36

General

  • Target

    5910c8ebfd87745bb2b8d781c5051b13ec7b7aa91dc6b6db01468240a24c9f8f.exe

  • Size

    168KB

  • MD5

    5fc028351f5d1d29f7fe3c6bf441e840

  • SHA1

    859d1de70ee61e9743b1c04cae153e4e53e3c7e6

  • SHA256

    5910c8ebfd87745bb2b8d781c5051b13ec7b7aa91dc6b6db01468240a24c9f8f

  • SHA512

    5d17558f7615d61ba7859bfcc507974553ede6455bb85630fa018f88a5fe29e90a8cc7f99f51cf4ca6907cb094b39a90fbce6cb4851ac7344f3751e938390798

  • SSDEEP

    3072:JYNQKPWDynRefVJltZrpRl1P3b8KZAzhBS3RVnxtmMug6j6c:yNSDynRO1thpV8EAzhBYnxkHSc

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5910c8ebfd87745bb2b8d781c5051b13ec7b7aa91dc6b6db01468240a24c9f8f.exe
    "C:\Users\Admin\AppData\Local\Temp\5910c8ebfd87745bb2b8d781c5051b13ec7b7aa91dc6b6db01468240a24c9f8f.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:652
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 652 -s 160
      2⤵
      • Program crash
      PID:1044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/652-54-0x0000000075531000-0x0000000075533000-memory.dmp

    Filesize

    8KB

  • memory/652-56-0x0000000001000000-0x0000000001026000-memory.dmp

    Filesize

    152KB