Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
11/11/2023, 13:13
Behavioral task
behavioral1
Sample
newtest.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
newtest.exe
Resource
win10v2004-20231020-en
General
-
Target
newtest.exe
-
Size
8.4MB
-
MD5
a521037485a10c106d14746ab51450d9
-
SHA1
3b2da8d62aca24672bd7dbe8137fbc878873bf1c
-
SHA256
63a6c74e23397d35f3bb684ccb35c81014d53a63a8e40b505249f8a6c3616ada
-
SHA512
86ab3e14a7f813f78efcbf0e10c3698238eef861d0b4fe7e4f2f032c2e158f1ec22b26b8fff8f6d7f64d4c1ddd9ba36abc306ba03971b9ce7cc676a47f276b6f
-
SSDEEP
196608:c4uprnn1W903eV4QRItpDjIIAcwDIlaUGcRPdvvk9UIi:iL1W+eGQRg9jocBGcGt
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2156 newtest.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1896 wrote to memory of 2156 1896 newtest.exe 29 PID 1896 wrote to memory of 2156 1896 newtest.exe 29 PID 1896 wrote to memory of 2156 1896 newtest.exe 29
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.6MB
MD55c5602cda7ab8418420f223366fff5db
SHA152f81ee0aef9b6906f7751fd2bbd4953e3f3b798
SHA256e7890e38256f04ee0b55ac5276bbf3ac61392c3a3ce150bb5497b709803e17ce
SHA51251c3b4f29781bb52c137ddb356e1bc5a37f3a25f0ed7d89416b14ed994121f884cb3e40ccdbb211a8989e3bd137b8df8b28e232f98de8f35b03965cfce4b424f
-
Filesize
6.6MB
MD55c5602cda7ab8418420f223366fff5db
SHA152f81ee0aef9b6906f7751fd2bbd4953e3f3b798
SHA256e7890e38256f04ee0b55ac5276bbf3ac61392c3a3ce150bb5497b709803e17ce
SHA51251c3b4f29781bb52c137ddb356e1bc5a37f3a25f0ed7d89416b14ed994121f884cb3e40ccdbb211a8989e3bd137b8df8b28e232f98de8f35b03965cfce4b424f