Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/12/2023, 10:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a988bbf483129c8800cef3930d52702.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a988bbf483129c8800cef3930d52702.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
0a988bbf483129c8800cef3930d52702.exe
-
Size
79KB
-
MD5
0a988bbf483129c8800cef3930d52702
-
SHA1
208b6f7885f72ca23d08e0435a0ae862b3ff194b
-
SHA256
162b5d87882a455002b959e9ba531f67010c57e44225c93ced4370da2c4193bc
-
SHA512
970f9192d7182064426c7a0f306a67ffba84a046f317b7d9b46e224f59a4fd1480a45b7489abdcb6589077516ed97b45fa550e1b728b7d58cab7aad8a739e3c9
-
SSDEEP
1536:ILlGcQ3zb1lPbOCgl3X7HUtQOVLFmrqfxum11oQgr:I5RSnSVE1Wx
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1444 wrote to memory of 2692 1444 0a988bbf483129c8800cef3930d52702.exe 28 PID 1444 wrote to memory of 2692 1444 0a988bbf483129c8800cef3930d52702.exe 28 PID 1444 wrote to memory of 2692 1444 0a988bbf483129c8800cef3930d52702.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a988bbf483129c8800cef3930d52702.exe"C:\Users\Admin\AppData\Local\Temp\0a988bbf483129c8800cef3930d52702.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1444 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1444 -s 5322⤵PID:2692
-