Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 04:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
288becc90153a3d4a5ee10dfffd7520d.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
288becc90153a3d4a5ee10dfffd7520d.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
288becc90153a3d4a5ee10dfffd7520d.exe
-
Size
56KB
-
MD5
288becc90153a3d4a5ee10dfffd7520d
-
SHA1
61a3a1775f2db7ad74c0076affa3a36663d8374b
-
SHA256
8e7484f03f7440c3bfbdd07c9f8feff132bdbc6efbc4f3f141d3cc807d5081d4
-
SHA512
1720adcb989ae488ad9936a8d09f80dcee8b372d1bd37a335b5175714bfc03bf0ea510aef53038e2bdfb67d34ba98ae2e7001555ddb0e75c457ab2d7451b0d34
-
SSDEEP
768:Zmh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfPx2X0xzM/YuLds5EparVMyyEDAM:EZ/nEkh8OTKNQHzA1LA0aBy9h1Dh9x2
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3856 288becc90153a3d4a5ee10dfffd7520d.exe 3856 288becc90153a3d4a5ee10dfffd7520d.exe 3856 288becc90153a3d4a5ee10dfffd7520d.exe 3856 288becc90153a3d4a5ee10dfffd7520d.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3856 wrote to memory of 3512 3856 288becc90153a3d4a5ee10dfffd7520d.exe 47 PID 3856 wrote to memory of 3512 3856 288becc90153a3d4a5ee10dfffd7520d.exe 47 PID 3856 wrote to memory of 3512 3856 288becc90153a3d4a5ee10dfffd7520d.exe 47 PID 3856 wrote to memory of 3512 3856 288becc90153a3d4a5ee10dfffd7520d.exe 47
Processes
-
C:\Users\Admin\AppData\Local\Temp\288becc90153a3d4a5ee10dfffd7520d.exe"C:\Users\Admin\AppData\Local\Temp\288becc90153a3d4a5ee10dfffd7520d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3856
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:3512