Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 21:37
Static task
static1
Behavioral task
behavioral1
Sample
134ae66a112c90aa9bc64ce5bfe74e39.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
134ae66a112c90aa9bc64ce5bfe74e39.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
134ae66a112c90aa9bc64ce5bfe74e39.exe
-
Size
149KB
-
MD5
134ae66a112c90aa9bc64ce5bfe74e39
-
SHA1
16a1dcb523c2652f6dc362a2967b2c7a1715c937
-
SHA256
76572b3887726b8e947b3af42c8f8fc418ee1352636e93226ce50f866b057802
-
SHA512
ea5a8f91b6de9eaf155bbd274cc9a8a3839b94b834a101003fff4ba66186917ab0f8994af1a71e7a8e3cfc2052a87c636a83735bb4577eaa6613e6de5ce8ceee
-
SSDEEP
3072:yGZUDfQSuSs9GY3YtpJnJGiuMcDUztJLtKnoY6JJ8ef:j6DfQSuSs9TYGj3UM6JB
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 428 wrote to memory of 1500 428 134ae66a112c90aa9bc64ce5bfe74e39.exe 89 PID 428 wrote to memory of 1500 428 134ae66a112c90aa9bc64ce5bfe74e39.exe 89 PID 428 wrote to memory of 1500 428 134ae66a112c90aa9bc64ce5bfe74e39.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\134ae66a112c90aa9bc64ce5bfe74e39.exe"C:\Users\Admin\AppData\Local\Temp\134ae66a112c90aa9bc64ce5bfe74e39.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:428 -
C:\Users\Admin\AppData\Local\Temp\134ae66a112c90aa9bc64ce5bfe74e39.exeC:\Users\Admin\AppData\Local\Temp\134ae66a112c90aa9bc64ce5bfe74e39.exe -deleter2⤵PID:1500
-