Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
27/11/2023, 02:57
General
-
Target
885a57ffc3de62412a0d821494e448a8473e4b993f751b21abd7381b2e6fac26.exe
-
Size
153.8MB
-
MD5
d2f13407c8c76da4b4fe11984faf688d
-
SHA1
2273136cdb9dbe66d969e5c0f66ae9b56077fc8b
-
SHA256
885a57ffc3de62412a0d821494e448a8473e4b993f751b21abd7381b2e6fac26
-
SHA512
f97a278a14da021c0311300e014661419cb29e76e398fe67510f02c0f1c67d1cc3c472852780b0a431437be2f0f8ed44dbeb8414ac5e01f3172a04ba1360eacf
-
SSDEEP
786432:zCkzx6Lj+4v1SoNjWPNLd1pQshPQLnXni9vyM/52nyMh8saqef4Gj:zt0GU1JNSPtyLXi9vOn6Lf4u
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\885a57ffc3de62412a0d821494e448a8473e4b993f751b21abd7381b2e6fac26.exe"C:\Users\Admin\AppData\Local\Temp\885a57ffc3de62412a0d821494e448a8473e4b993f751b21abd7381b2e6fac26.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2624 -s 6802⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.4MB
-
Filesize
12.6MB
-
Filesize
15.4MB
-
Filesize
2.2MB
-
Filesize
1.4MB
-
Filesize
320KB
-
Filesize
256KB
-
Filesize
8.2MB
-
Filesize
576KB
-
Filesize
128KB
-
Filesize
64KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
128KB
-
Filesize
256KB
-
Filesize
128KB
-
Filesize
192KB
-
Filesize
9.4MB