Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
28/12/2023, 21:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f927e0af8ab0b4963efdd2c35f77c270.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
f927e0af8ab0b4963efdd2c35f77c270.exe
Resource
win10v2004-20231222-en
4 signatures
150 seconds
General
-
Target
f927e0af8ab0b4963efdd2c35f77c270.exe
-
Size
168KB
-
MD5
f927e0af8ab0b4963efdd2c35f77c270
-
SHA1
40a68e7f49bf6af45f2375778811fd627bce38fc
-
SHA256
8a955482091d20b143bc888d97f198806e6071f3789d1c083490a847f7534501
-
SHA512
dc508f64e0c8a9428607d4efa4cadcbdbb70773bb1bd2a8b03adb530692ff6e6ed97608a9b2950ab22d72d3cf04d498bfc42622b7108c2ef5e49a139cab1c0ff
-
SSDEEP
3072:PaK+tsB/z19bjhpbKFT0vjjjgCP5qc1aDXsmamp5JyPtIzoaly8/Qt9yQlmJba6D:+tU19bjhpbKFT0vjjjgI5qcQw7mjJy2w
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1072 wrote to memory of 1672 1072 f927e0af8ab0b4963efdd2c35f77c270.exe 28 PID 1072 wrote to memory of 1672 1072 f927e0af8ab0b4963efdd2c35f77c270.exe 28 PID 1072 wrote to memory of 1672 1072 f927e0af8ab0b4963efdd2c35f77c270.exe 28 PID 1072 wrote to memory of 1672 1072 f927e0af8ab0b4963efdd2c35f77c270.exe 28