Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    12/11/2023, 07:24

General

  • Target

    Meteos Test version negative 10000/Meteos Test.exe

  • Size

    651KB

  • MD5

    65be9ef7b720d36481f9e211c72f6fd6

  • SHA1

    4e8da2a80f5d2181b06b8efccd431903c8aa2ab0

  • SHA256

    cd7b648a779720458df5283e5256826a0a4f9af076c7e740cbe78e025a4892a5

  • SHA512

    2293ac8126b2fe06a2f6f618181d4cf8a089129f9abcbe229e04a37a1bf4e6bc74d84a0dfc5b96b1aec773df287f12714cd9c886c62cf113f5d4ef7a507794aa

  • SSDEEP

    3072:bQJ/VdFgIW9mYucJ/OD8JlsI9mTIC7G2E1:w/7FG9mpcJ/OD8z/

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Meteos Test version negative 10000\Meteos Test.exe
    "C:\Users\Admin\AppData\Local\Temp\Meteos Test version negative 10000\Meteos Test.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1372
    • C:\Users\Admin\AppData\Local\Temp\Meteos Test version negative 10000\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\Meteos Test version negative 10000\UnityCrashHandler64.exe" --attach 1372 2035712
      2⤵
        PID:2392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1372-0-0x0000000001C20000-0x0000000001C30000-memory.dmp

      Filesize

      64KB

    • memory/1372-1-0x0000000000230000-0x0000000000240000-memory.dmp

      Filesize

      64KB

    • memory/1372-2-0x0000000062960000-0x0000000062970000-memory.dmp

      Filesize

      64KB

    • memory/1372-3-0x0000000062970000-0x0000000062990000-memory.dmp

      Filesize

      128KB

    • memory/1372-4-0x0000000062CD0000-0x0000000062CE0000-memory.dmp

      Filesize

      64KB

    • memory/1372-9-0x0000000062E30000-0x0000000062E40000-memory.dmp

      Filesize

      64KB

    • memory/1372-16-0x000007FFFFEC0000-0x000007FFFFED0000-memory.dmp

      Filesize

      64KB

    • memory/1372-24-0x0000000062EE0000-0x0000000062EF0000-memory.dmp

      Filesize

      64KB

    • memory/1372-25-0x00000000630F0000-0x0000000063100000-memory.dmp

      Filesize

      64KB

    • memory/1372-26-0x0000000001C20000-0x0000000001C30000-memory.dmp

      Filesize

      64KB

    • memory/1372-27-0x0000000000230000-0x0000000000240000-memory.dmp

      Filesize

      64KB

    • memory/1372-29-0x0000000063100000-0x0000000063110000-memory.dmp

      Filesize

      64KB

    • memory/1372-28-0x0000000062960000-0x0000000062970000-memory.dmp

      Filesize

      64KB

    • memory/1372-34-0x0000000063110000-0x0000000063120000-memory.dmp

      Filesize

      64KB

    • memory/1372-36-0x0000000062970000-0x0000000062990000-memory.dmp

      Filesize

      128KB

    • memory/1372-38-0x0000000063120000-0x0000000063140000-memory.dmp

      Filesize

      128KB

    • memory/1372-39-0x000007FFFFEB0000-0x000007FFFFEC0000-memory.dmp

      Filesize

      64KB

    • memory/1372-43-0x0000000062CD0000-0x0000000062CE0000-memory.dmp

      Filesize

      64KB

    • memory/1372-45-0x0000000063180000-0x0000000063190000-memory.dmp

      Filesize

      64KB

    • memory/1372-44-0x0000000062E30000-0x0000000062E40000-memory.dmp

      Filesize

      64KB

    • memory/1372-54-0x0000000062EE0000-0x0000000062EF0000-memory.dmp

      Filesize

      64KB

    • memory/1372-55-0x00000000630F0000-0x0000000063100000-memory.dmp

      Filesize

      64KB

    • memory/1372-56-0x0000000063100000-0x0000000063110000-memory.dmp

      Filesize

      64KB

    • memory/1372-57-0x0000000063110000-0x0000000063120000-memory.dmp

      Filesize

      64KB

    • memory/1372-58-0x0000000063180000-0x0000000063190000-memory.dmp

      Filesize

      64KB