Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    34s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 07:31

General

  • Target

    84c85dc85bd2a1f3e519751f3b414796b2f0a724bf9176bfc57db4d0b107f042.exe

  • Size

    28KB

  • MD5

    17f8ca49ce313ed59d770f21bc795790

  • SHA1

    5748cdad5a0aef0da2baca757a7b564e64e446e5

  • SHA256

    84c85dc85bd2a1f3e519751f3b414796b2f0a724bf9176bfc57db4d0b107f042

  • SHA512

    329d15af349ebf4178d856890f11b02a41735564306e6da2e36aef960d001ac035bd0ea165265491b697120db06fc5dc4a8da88d2e4c0abdb4323eeb3fc5f5dd

  • SSDEEP

    384:gW5ReMhcJGhON6Nr+I5vH2UQCjsT/VaU3U:BnYsEN6Nrj/2UZjsT1U

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\84c85dc85bd2a1f3e519751f3b414796b2f0a724bf9176bfc57db4d0b107f042.exe
    "C:\Users\Admin\AppData\Local\Temp\84c85dc85bd2a1f3e519751f3b414796b2f0a724bf9176bfc57db4d0b107f042.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1612 -s 88
      2⤵
      • Program crash
      PID:788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1612-55-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB