Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    28s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2023, 12:14

General

  • Target

    bcbdacb.exe

  • Size

    1.2MB

  • MD5

    b99290063c63c1449c6d61c62f95528d

  • SHA1

    dc80d751832030dbe05bb34e691a6237e2a224b5

  • SHA256

    162833c025dda5b2154fc193bc71bc3e375794e13f6392f387839599df9d90e0

  • SHA512

    4f6b717d1c18042243f7f62009e2638fa51e2a7139285a8469e3ba2458dc658ef6ccc8401b7c1ade0742c4dd6dd7ab98c487165f0142558191e9a7192c57c19c

  • SSDEEP

    12288:UPqvdlwvVVmpmiUkWnbaczXSisUFhiqNnuJCbM/C3irgP92vjy9jhBvcS5K+xlBW:Uy5iV7bTEyhBVdhPTyITdOqa

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcbdacb.exe
    "C:\Users\Admin\AppData\Local\Temp\bcbdacb.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1996 -s 692
      2⤵
      • Program crash
      PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1996-54-0x0000000000DC0000-0x0000000000EF8000-memory.dmp

    Filesize

    1.2MB

  • memory/1996-55-0x000000001B610000-0x000000001B690000-memory.dmp

    Filesize

    512KB

  • memory/1996-56-0x000000001B610000-0x000000001B690000-memory.dmp

    Filesize

    512KB