Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    44s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2023, 18:56 UTC

General

  • Target

    c6adfedee311fb7abfebdfa53b19e73b9ef39cfb.exe

  • Size

    37KB

  • MD5

    f314dc3a42f3125ef12c61b01134476e

  • SHA1

    c6adfedee311fb7abfebdfa53b19e73b9ef39cfb

  • SHA256

    6d9a57fb6ede0c2878d297c5a4c15c3c39269d6919f7feea70fa7700fb4b2d24

  • SHA512

    2ae641c1987357f53608a3d0b7b82b6a1e577d16e63854447ca69275bcf02d6e370cc90eb16897254eb40cba694c4bb44ba6ac3417a41d21c4db2455868cce9c

  • SSDEEP

    768:HevwNCHW1TxGm+N9erXsgJZnt+AcQqt5RYVMUr24v:/NC21T4m+N9qX/vt+WqtfY4

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6adfedee311fb7abfebdfa53b19e73b9ef39cfb.exe
    "C:\Users\Admin\AppData\Local\Temp\c6adfedee311fb7abfebdfa53b19e73b9ef39cfb.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1928 -s 740
      2⤵
      • Program crash
      PID:668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1928-54-0x00000000012C0000-0x00000000012CE000-memory.dmp

    Filesize

    56KB

  • memory/1928-55-0x000007FEFBEE1000-0x000007FEFBEE3000-memory.dmp

    Filesize

    8KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.