Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    236s
  • max time network
    336s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    02/12/2022, 22:35

General

  • Target

    87de8464e293b44542371a525cd3b51657d2298ad88ecb24e558775a1c259c74.exe

  • Size

    183KB

  • MD5

    9b5ab8796b10e2d2d21db83884b6d806

  • SHA1

    08bb731aa1a9440cca51c1a4a46d19afb8c69122

  • SHA256

    87de8464e293b44542371a525cd3b51657d2298ad88ecb24e558775a1c259c74

  • SHA512

    eb312f6d672a1604154026f61856eb37d8699f9356ddc0feb2e87504a00b83f262fffe61b5430a7ff16a35686b697aa302f278ddf0f726a1ebbae42afbc6f72e

  • SSDEEP

    3072:Sfyj/EPgFHs7aJJD/nLT9IZrmz02F9ZavTLEWTken2TaI/445:SfyAoG7aPndOrTLEWkY0/V5

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\87de8464e293b44542371a525cd3b51657d2298ad88ecb24e558775a1c259c74.exe
    "C:\Users\Admin\AppData\Local\Temp\87de8464e293b44542371a525cd3b51657d2298ad88ecb24e558775a1c259c74.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Users\Admin\AppData\Local\Temp\87de8464e293b44542371a525cd3b51657d2298ad88ecb24e558775a1c259c74.exe
      "C:\Users\Admin\AppData\Local\Temp\87de8464e293b44542371a525cd3b51657d2298ad88ecb24e558775a1c259c74.exe"
      2⤵
        PID:296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/296-65-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-63-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-61-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-58-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-56-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-55-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-67-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-70-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/296-73-0x0000000060140000-0x0000000060168000-memory.dmp

      Filesize

      160KB

    • memory/1720-54-0x0000000075831000-0x0000000075833000-memory.dmp

      Filesize

      8KB