Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
37s -
max time network
162s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system -
submitted
29/06/2023, 20:39
Static task
static1
Behavioral task
behavioral1
Sample
Aseprite/Aseprite.exe
Resource
win7-20230621-en
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
Aseprite/Aseprite.exe
Resource
win10v2004-20230621-en
9 signatures
600 seconds
General
-
Target
Aseprite/Aseprite.exe
-
Size
18.4MB
-
MD5
68ee41e46f25b59c660dd16ccbb83250
-
SHA1
7654180a1b09a46bd39cf3c7b16603ff7d29e7a8
-
SHA256
4041bdabcd9cc0c1c9c4ec81346e0a9f89f7be30b73a40367b3ae81e190ab01d
-
SHA512
06c3b86bdebd70f8a975c954d836266ea1c0bfbaccf4912b1d0be8b27f03d71ac1f909cbffc686bb037bb79faffe91f2e6ec9ca43214fefaa6bf2bc7e4bd6079
-
SSDEEP
196608:/KByHGwgQjQSxTUm/sQi6tfSEeNl468+aYF/VCXJUxqKU:eyHtLJxTUm/sQi6tfSEW4h+a4/VCWqKU
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2024 Aseprite.exe 2024 Aseprite.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2024 wrote to memory of 1996 2024 Aseprite.exe 26 PID 2024 wrote to memory of 1996 2024 Aseprite.exe 26 PID 2024 wrote to memory of 1996 2024 Aseprite.exe 26
Processes
-
C:\Users\Admin\AppData\Local\Temp\Aseprite\Aseprite.exe"C:\Users\Admin\AppData\Local\Temp\Aseprite\Aseprite.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2024 -
C:\Users\Admin\AppData\Local\Temp\Aseprite\aseprite_crashpad_handler.exeC:\Users\Admin\AppData\Local\Temp\Aseprite\aseprite_crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb --metrics-dir=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb --url=https://o952035.ingest.sentry.io:443/api/5901269/minidump/?sentry_client=sentry.native/0.6.1&sentry_key=c5ddc970388d4c0a94db6e5d50d384ed --attachment=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb\8de024d1-2165-41da-5b06-a0f6c8566439.run\__sentry-event --attachment=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb\8de024d1-2165-41da-5b06-a0f6c8566439.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb\8de024d1-2165-41da-5b06-a0f6c8566439.run\__sentry-breadcrumb2 --initial-client-data=0x1c4,0x1c8,0x1cc,0x1a0,0x1d0,0x140434890,0x1404348b0,0x1404348c82⤵PID:1996
-