Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
24/12/2023, 20:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
123a94e7f44b163901edbe6549523776.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
123a94e7f44b163901edbe6549523776.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
123a94e7f44b163901edbe6549523776.exe
-
Size
83KB
-
MD5
123a94e7f44b163901edbe6549523776
-
SHA1
d2a0fe5717b5b0442251318a9136b08a5b7f5000
-
SHA256
58cb5f324f551534a098f57519e06a5f27bec94345188c643e98534101c0f1d5
-
SHA512
2d1880ffcd449b27b7b670c4701cb36257e117c5a629a4b9d06fd594e0fb12ea1b5b3c11b7cf8ae39863ca5cf5416b6d0ac918468c1e2556996352da5cc271b3
-
SSDEEP
1536:aZGeXHRrd392uSSA/N+dL8d8VKHfJCu8JrfpjVrs2ryrd1vUQuqnqI6:atXHEpnN+Y88HVWrfHs2q
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process 2268 2248 WerFault.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2248 wrote to memory of 2268 2248 123a94e7f44b163901edbe6549523776.exe 16 PID 2248 wrote to memory of 2268 2248 123a94e7f44b163901edbe6549523776.exe 16 PID 2248 wrote to memory of 2268 2248 123a94e7f44b163901edbe6549523776.exe 16 PID 2248 wrote to memory of 2268 2248 123a94e7f44b163901edbe6549523776.exe 16
Processes
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 361⤵
- Program crash
PID:2268
-
C:\Users\Admin\AppData\Local\Temp\123a94e7f44b163901edbe6549523776.exe"C:\Users\Admin\AppData\Local\Temp\123a94e7f44b163901edbe6549523776.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2248