Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
170s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 11:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
174f85abda4ed48b438a1a487cb47e5f.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
174f85abda4ed48b438a1a487cb47e5f.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
174f85abda4ed48b438a1a487cb47e5f.exe
-
Size
91KB
-
MD5
174f85abda4ed48b438a1a487cb47e5f
-
SHA1
cd324bbb18f49c89e5e8c32ea18af4800f76a4bd
-
SHA256
51e836a76e738526bf44d6ccfe51916bef009f0a9515d6b5f1fb6cc9dd1178f9
-
SHA512
5a52e642b7a1c2a46b2fb48a5b291a93a4fbdaf5f92773d342e1141ec3cde162ca55cfb06d8c14d555c56f2bbf71013c46d0d8f82826fad02e0095c37c93aa99
-
SSDEEP
1536:A5XAx24NOuFDWymzYy9/kn+ddvHOkRrAotvQMBVF0TNwAfnVfWSVa7omMU:YAInIEYy9lFHjAolQlNwA5WSVFmMU
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 4560 174f85abda4ed48b438a1a487cb47e5f.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 4560 wrote to memory of 2296 4560 174f85abda4ed48b438a1a487cb47e5f.exe 90 PID 4560 wrote to memory of 2296 4560 174f85abda4ed48b438a1a487cb47e5f.exe 90 PID 4560 wrote to memory of 2296 4560 174f85abda4ed48b438a1a487cb47e5f.exe 90 PID 4560 wrote to memory of 2296 4560 174f85abda4ed48b438a1a487cb47e5f.exe 90 PID 4560 wrote to memory of 2296 4560 174f85abda4ed48b438a1a487cb47e5f.exe 90 PID 4560 wrote to memory of 2296 4560 174f85abda4ed48b438a1a487cb47e5f.exe 90