Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
04/12/2022, 06:00
Static task
static1
Behavioral task
behavioral1
Sample
a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe
Resource
win10v2004-20220812-en
General
-
Target
a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe
-
Size
46KB
-
MD5
5102413cc6d27f196ee33459bba90965
-
SHA1
60793d34adabf9975121461a2b6b1b622760359b
-
SHA256
a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73
-
SHA512
0f7517fef53d2f79f0875d98e3a2df09e8c8d31e83927c93f3347ed204752d437c9306d10b409e66eff04ef291f61b666036cfbff712fb0e51ab5b32998d8744
-
SSDEEP
768:chTuiIEznoQXDuT+pxvPDgAiXKZC2p2ng4nGwcsN:cU5QXcCvfA2p2nNWsN
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1956 wrote to memory of 908 1956 a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe 28 PID 1956 wrote to memory of 908 1956 a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe 28 PID 1956 wrote to memory of 908 1956 a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe 28 PID 1956 wrote to memory of 908 1956 a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe"C:\Users\Admin\AppData\Local\Temp\a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1956 -
C:\Users\Admin\AppData\Local\Temp\a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe"C:\Users\Admin\AppData\Local\Temp\a7535a0d06b84136156e6b13100e8e9b2c3ebc1250ce312a443dcbee60cb0a73.exe"2⤵PID:908
-