Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
29/08/2023, 21:10
Static task
static1
Behavioral task
behavioral1
Sample
6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe
Resource
win10v2004-20230703-en
General
-
Target
6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe
-
Size
13.0MB
-
MD5
e162c6a728c92408753f2dc29e31808e
-
SHA1
f256a997245f76029e5022b90c82e12150c6f835
-
SHA256
6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1
-
SHA512
650b993e0cb05a5dd58705d842139bd2885286d50ddbd79aee01cb2eead059c2e8ea71c7fc2f8ebc492daa4466dbaa5f35dddf12b6a0d7b8a19f3ff6e34ce221
-
SSDEEP
98304:XJHvitZwtqDsW3E80DCV2bh2chsLzNIu+qoOzz8MFUD9xXf7YR7s:XNiZwtqAWv0DCVUvhsLyuFjz8nXzYR7s
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2768 2436 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2436 wrote to memory of 2768 2436 6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe 28 PID 2436 wrote to memory of 2768 2436 6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe 28 PID 2436 wrote to memory of 2768 2436 6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe 28 PID 2436 wrote to memory of 2768 2436 6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe"C:\Users\Admin\AppData\Local\Temp\6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2436 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 2122⤵
- Program crash
PID:2768
-