Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 17:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2fc60cfc3fa0045269991477ad0ef561.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2fc60cfc3fa0045269991477ad0ef561.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
2fc60cfc3fa0045269991477ad0ef561.exe
-
Size
305KB
-
MD5
2fc60cfc3fa0045269991477ad0ef561
-
SHA1
5e182307cd2a4f802a7c6eaba0c4d15f36cf0b0c
-
SHA256
3cfbfb0aea309f3883b7656b639542aff9be5942eac4b67a11fd74160d075e50
-
SHA512
46d994d87e8304070196cd8277d3c929fc7a73df458821e111f5e955db5dcdfe3245d4aa22569b51cea20cb31110ea26d3f0db9a3317efbf6ab12117996d5167
-
SSDEEP
6144:cPPTbSO7/XrN1ZsT5KkmtuYA3I9eXK2msu:cPx/rddwt3kfZ
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1048 2fc60cfc3fa0045269991477ad0ef561.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 1048 wrote to memory of 4328 1048 2fc60cfc3fa0045269991477ad0ef561.exe 18 PID 1048 wrote to memory of 4328 1048 2fc60cfc3fa0045269991477ad0ef561.exe 18 PID 1048 wrote to memory of 4328 1048 2fc60cfc3fa0045269991477ad0ef561.exe 18 PID 1048 wrote to memory of 4328 1048 2fc60cfc3fa0045269991477ad0ef561.exe 18 PID 1048 wrote to memory of 4328 1048 2fc60cfc3fa0045269991477ad0ef561.exe 18 PID 1048 wrote to memory of 4328 1048 2fc60cfc3fa0045269991477ad0ef561.exe 18