Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
123s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 13:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
37f244cb6505a3820ad2e2699b83c697.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
37f244cb6505a3820ad2e2699b83c697.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
37f244cb6505a3820ad2e2699b83c697.exe
-
Size
3KB
-
MD5
37f244cb6505a3820ad2e2699b83c697
-
SHA1
03d49ee996a9429d24b6afd211d55f561e761e2b
-
SHA256
55a34accf93ba5eb8cdc23a3aea07dc39893cd4cfea6b3515ab89c882d77b490
-
SHA512
c1a74b66e88297c9c85316f866623ad1f46f96a12d0c1310a2e5393b10b6bdd7aa323a12a534eff3c7f46be04c7f14c0032acecce322eb3677a8b6edf3f46611
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process 2292 2272 WerFault.exe -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2272 wrote to memory of 2292 2272 37f244cb6505a3820ad2e2699b83c697.exe 16 PID 2272 wrote to memory of 2292 2272 37f244cb6505a3820ad2e2699b83c697.exe 16 PID 2272 wrote to memory of 2292 2272 37f244cb6505a3820ad2e2699b83c697.exe 16 PID 2272 wrote to memory of 2292 2272 37f244cb6505a3820ad2e2699b83c697.exe 16
Processes
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2272 -s 361⤵
- Program crash
PID:2292
-
C:\Users\Admin\AppData\Local\Temp\37f244cb6505a3820ad2e2699b83c697.exe"C:\Users\Admin\AppData\Local\Temp\37f244cb6505a3820ad2e2699b83c697.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2272