Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    89s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 05:29

General

  • Target

    44298063a275df5a97f01ebdcfa6e8a5a33a987f6eedcfca5327141d61e86a6f.exe

  • Size

    117KB

  • MD5

    9fa1950e5bdc408a5131f9226b49c133

  • SHA1

    61366dd7c72b7855f95325cba82b79a940f6c031

  • SHA256

    44298063a275df5a97f01ebdcfa6e8a5a33a987f6eedcfca5327141d61e86a6f

  • SHA512

    05228f05874e10bb0deedb5435f85605c7ccbb9ca979c6d8512d858647e8623128b40d06ca2134a796c40a17bb73c014d66dc489d82858abd6056ac87f4194bb

  • SSDEEP

    1536:C4neNnX8XDKroSxNjYqPpFI2vnPbtRlEMV5iNPVdLdJanJUlhfUvVTskg:C4srTNjlpFI2ZUMLSVdLdJanJUlVqW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\44298063a275df5a97f01ebdcfa6e8a5a33a987f6eedcfca5327141d61e86a6f.exe
    "C:\Users\Admin\AppData\Local\Temp\44298063a275df5a97f01ebdcfa6e8a5a33a987f6eedcfca5327141d61e86a6f.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:940
    • C:\Users\Admin\AppData\Local\Temp\44298063a275df5a97f01ebdcfa6e8a5a33a987f6eedcfca5327141d61e86a6f.exe
      C:\Users\Admin\AppData\Local\Temp\44298063a275df5a9" 48
      2⤵
      • Suspicious behavior: GetForegroundWindowSpam
      PID:1140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/940-54-0x0000000074DE1000-0x0000000074DE3000-memory.dmp

    Filesize

    8KB

  • memory/1140-57-0x0000000010000000-0x000000001000D000-memory.dmp

    Filesize

    52KB