Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 21:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1d959cb80b6ae5020ba7a1bbc9dc2682.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1d959cb80b6ae5020ba7a1bbc9dc2682.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
1d959cb80b6ae5020ba7a1bbc9dc2682.exe
-
Size
82KB
-
MD5
1d959cb80b6ae5020ba7a1bbc9dc2682
-
SHA1
04ad969a9aefff018008a23068f4cce81cf166aa
-
SHA256
4c1fdc9e487be3276372c8bf53d8803e4381a178ac41555ad1bc5dc1db311024
-
SHA512
59f3b4320ba528824c3a1f77f5b4e9674f3668ce1b1c6b880a6098f769ce0cfbe5aebbe5aa797b2010ade9e77c56b433b6e6d410e03f3e7b6880f4108c8e05b1
-
SSDEEP
1536:neGXJxjoTqDOf7+bIUf63+8Ac49kf6AICd621QlblXr1Lb/dASiNFpudX0U:neG5x8caI3aA0ftdhMZNb/2SiNuZ0U
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17 PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17 PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17 PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17 PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17 PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17 PID 3064 wrote to memory of 2728 3064 1d959cb80b6ae5020ba7a1bbc9dc2682.exe 17