Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
26s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
09/07/2023, 09:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7a46d965bc7b8exeexeexeex.exe
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7a46d965bc7b8exeexeexeex.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
a7a46d965bc7b8exeexeexeex.exe
-
Size
186KB
-
MD5
a7a46d965bc7b87be9a15f3ce5f37c68
-
SHA1
0992aa9f39102ec74b665caab57416c33b5dbd2c
-
SHA256
1c13de81c17d581a0193d21632542fae01c4ca9b99bfe662684a1a36e012abdb
-
SHA512
bb5bfa7b24ac2b557bf811e902d4c193eb499365ba693b7255de0e1c4964fc17c3e2c09ccde96489e4ee9a77999839a6ab5fdd1dd5c71206775d33528651ad0e
-
SSDEEP
3072:i/jQeiOl2qNXSGCryn6/IXzJIly0UkXU7wWYA+hDN77x:i/0rOEwXSLrynBDl0UD7NwRB7x
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2312 2232 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2232 wrote to memory of 2312 2232 a7a46d965bc7b8exeexeexeex.exe 28 PID 2232 wrote to memory of 2312 2232 a7a46d965bc7b8exeexeexeex.exe 28 PID 2232 wrote to memory of 2312 2232 a7a46d965bc7b8exeexeexeex.exe 28 PID 2232 wrote to memory of 2312 2232 a7a46d965bc7b8exeexeexeex.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7a46d965bc7b8exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\a7a46d965bc7b8exeexeexeex.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2232 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 362⤵
- Program crash
PID:2312
-