Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
7s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
01/12/2022, 00:56
Static task
static1
Behavioral task
behavioral1
Sample
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe
Resource
win10v2004-20221111-en
General
-
Target
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe
-
Size
332KB
-
MD5
39a95f20d3151db93c0bfc7403d0d361
-
SHA1
5f128bb6d35f74be06f6250a896bc49f082dfb6e
-
SHA256
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f
-
SHA512
a16373c3191c3eaa57c9d30b96edd3afd57683850aa4fe006f3bd9ac6248ae9c55946ad5a15e98bbb85f8966e4acf8942a31aca19e9f31ea63e7a27fd121d0a6
-
SSDEEP
6144:b+F1K4yIy+gQQtoYpUrzUQA+DGymR9XdiO3yf6aTUXYNi4RVc5w:Z7vhOuUrFCbd/y7q1w
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 688 956 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 956 wrote to memory of 688 956 900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe 28 PID 956 wrote to memory of 688 956 900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe 28 PID 956 wrote to memory of 688 956 900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe 28 PID 956 wrote to memory of 688 956 900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe"C:\Users\Admin\AppData\Local\Temp\900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:956 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 956 -s 1842⤵
- Program crash
PID:688
-