Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 14:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
76d3c179ade9e135c9c71be9e7ad3846.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
76d3c179ade9e135c9c71be9e7ad3846.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
76d3c179ade9e135c9c71be9e7ad3846.exe
-
Size
28KB
-
MD5
76d3c179ade9e135c9c71be9e7ad3846
-
SHA1
be63080848f349dcc2731910e4abee5f38f9babf
-
SHA256
32a31ce97da840140cf59c387213eabec80eeeb40f899944ee56e712c5f35cf2
-
SHA512
9982d74d0c5e8feeb9e0aedc616b04a03c89ad96daa48cd99eaa04ef1639bfb006292105109b227c1a8d2a0c5a9556865b0cdb59f683515443de0fa61dd54ea5
-
SSDEEP
384:UmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1x:hUjKVjl9xw3x6nz7vj1wr/
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 3004 76d3c179ade9e135c9c71be9e7ad3846.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 3004 wrote to memory of 3384 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 45 PID 3004 wrote to memory of 3384 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 45 PID 3004 wrote to memory of 3384 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 45 PID 3004 wrote to memory of 3384 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 45 PID 3004 wrote to memory of 3384 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 45 PID 3004 wrote to memory of 3384 3004 76d3c179ade9e135c9c71be9e7ad3846.exe 45
Processes
-
C:\Users\Admin\AppData\Local\Temp\76d3c179ade9e135c9c71be9e7ad3846.exe"C:\Users\Admin\AppData\Local\Temp\76d3c179ade9e135c9c71be9e7ad3846.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3004
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:3384