Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 02:00
General
-
Target
4b21bbd20b874060f1617052e29672d1.exe
-
Size
54KB
-
MD5
4b21bbd20b874060f1617052e29672d1
-
SHA1
4210b1a409eb8c149d4961f8b447def0bddc1c4b
-
SHA256
6951546d27416c6a2b263e359cf7c939a203302167af2083217bddfa2f1c92ca
-
SHA512
1bb5643199afe875fcd7118c36c9985f6d9b037eafd672c4f8fcd2747d7aee6ec14a9524a4c36d7a2c546c9afc6d487501686953edb6fb2467f9b70a9cdd1ae3
-
SSDEEP
768:rFM63iyTCU+W7V1YFhsMsA8qnD14Cr67hYqxDGQhCb/7aJGjN:rF/3nnMFhsM8qDXr8QGJG5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b21bbd20b874060f1617052e29672d1.exe"C:\Users\Admin\AppData\Local\Temp\4b21bbd20b874060f1617052e29672d1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 14482⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
256KB