Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
11/11/2023, 11:56
Behavioral task
behavioral1
Sample
NEAS.37f013c31624bf13b8d17dd121821c10.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.37f013c31624bf13b8d17dd121821c10.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.37f013c31624bf13b8d17dd121821c10.exe
-
Size
284KB
-
MD5
37f013c31624bf13b8d17dd121821c10
-
SHA1
2c83f375599120f4a6d93dce07a6c119d9c57523
-
SHA256
0dbd2bb25c8c644eb2d4747bc17c749e5fbb5cfa4a560598531383874b438178
-
SHA512
a80881f68393aec5ebe185e8d276ea41c81cdc8e1de83bd628966153a57492e7a0d2173024f7640bd4e9852b1414a02db9e74c194d8eb19139a3b6b7e8fbaecf
-
SSDEEP
3072:9yWC07DDH79msEocX1WdTCn93OGey/ZhJakrP:JC0fr7ssEocoTCndOGeKTa
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2032 2204 WerFault.exe 20 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2204 wrote to memory of 2032 2204 NEAS.37f013c31624bf13b8d17dd121821c10.exe 28 PID 2204 wrote to memory of 2032 2204 NEAS.37f013c31624bf13b8d17dd121821c10.exe 28 PID 2204 wrote to memory of 2032 2204 NEAS.37f013c31624bf13b8d17dd121821c10.exe 28 PID 2204 wrote to memory of 2032 2204 NEAS.37f013c31624bf13b8d17dd121821c10.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.37f013c31624bf13b8d17dd121821c10.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.37f013c31624bf13b8d17dd121821c10.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2204 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 362⤵
- Program crash
PID:2032
-