Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 04:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
288becc90153a3d4a5ee10dfffd7520d.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
288becc90153a3d4a5ee10dfffd7520d.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
288becc90153a3d4a5ee10dfffd7520d.exe
-
Size
56KB
-
MD5
288becc90153a3d4a5ee10dfffd7520d
-
SHA1
61a3a1775f2db7ad74c0076affa3a36663d8374b
-
SHA256
8e7484f03f7440c3bfbdd07c9f8feff132bdbc6efbc4f3f141d3cc807d5081d4
-
SHA512
1720adcb989ae488ad9936a8d09f80dcee8b372d1bd37a335b5175714bfc03bf0ea510aef53038e2bdfb67d34ba98ae2e7001555ddb0e75c457ab2d7451b0d34
-
SSDEEP
768:Zmh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfPx2X0xzM/YuLds5EparVMyyEDAM:EZ/nEkh8OTKNQHzA1LA0aBy9h1Dh9x2
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2216 288becc90153a3d4a5ee10dfffd7520d.exe 2216 288becc90153a3d4a5ee10dfffd7520d.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2216 wrote to memory of 1288 2216 288becc90153a3d4a5ee10dfffd7520d.exe 20 PID 2216 wrote to memory of 1288 2216 288becc90153a3d4a5ee10dfffd7520d.exe 20 PID 2216 wrote to memory of 1288 2216 288becc90153a3d4a5ee10dfffd7520d.exe 20 PID 2216 wrote to memory of 1288 2216 288becc90153a3d4a5ee10dfffd7520d.exe 20
Processes
-
C:\Users\Admin\AppData\Local\Temp\288becc90153a3d4a5ee10dfffd7520d.exe"C:\Users\Admin\AppData\Local\Temp\288becc90153a3d4a5ee10dfffd7520d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2216
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:1288