Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    39s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/12/2022, 02:24

General

  • Target

    d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe

  • Size

    76KB

  • MD5

    01833ef7c894d9502c3bcedfe6d370c4

  • SHA1

    dff3fb9c7b2b82e49a3956ee2949ffa001cfb360

  • SHA256

    d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617

  • SHA512

    31a8b5ee4095332bce204a2bca480a89251ce99af56b2350e7c03eb0ac03bbcaa94da2f9cbdbb1327f3ae6d3d7d054378e9661d6f6a555c5d84460bac9512cbf

  • SSDEEP

    1536:68MRs4vlK4t/WFTIv8TCK7jFH04O9mmQ4fOAV/tFhTocC:68SEAWaKXF+9fO6/BocC

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe
    "C:\Users\Admin\AppData\Local\Temp\d1837aa1633efc52ba6ecdd4ed892899c8486374b393ed73737838dbf7aa2617.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1488
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1488 -s 156
      2⤵
      • Program crash
      PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1488-54-0x0000000001000000-0x00000000010A7000-memory.dmp

    Filesize

    668KB