Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
05/01/2024, 13:05
Behavioral task
behavioral1
Sample
Creal.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Creal.exe
Resource
win10v2004-20231215-en
General
-
Target
Creal.exe
-
Size
13.2MB
-
MD5
bec3815764e313618da5a64890926a4b
-
SHA1
2cfc144aa32f51527493b5639da47646b656ef0b
-
SHA256
5c215f76ad1d1bee14572365b54bd43d3da825f2cc7aa8e90c2a76c865bcf731
-
SHA512
fb779e91786efd4ed9c6bd84cd38e2f4351ac1cad550fe7ad04734f9d9c0f26cb9f80222840369b14027689e04a5fedd99fbf1dd9572d9e79dab2426d811a94e
-
SSDEEP
393216:/XGD2nwW+eGQRIMTozGxu8C0ibfz6e57g1bmXiWCUI:/2DawW+e5R5oztZ026e5WFVUI
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2524 Creal.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2432 wrote to memory of 2524 2432 Creal.exe 23 PID 2432 wrote to memory of 2524 2432 Creal.exe 23 PID 2432 wrote to memory of 2524 2432 Creal.exe 23
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
MD515f570bc438b4dde115d3f506b4c0dce
SHA13fbdb97fa2335377d3dc608f083363dd7ad67ae5
SHA2564ed0fbdbc9c0959a98c4b82b5d42683c930d824ca4848bbcd683cfabe855b52a
SHA512b960ce224eedc71ae222a4279d71648353febd50c6a5bcc6bd875139043bf99caefcf1186fe35fc5123c47a6b9d2edfb6f2e9fe1d46d6a021fb059f08b92d101
-
Filesize
137KB
MD58e1eb6168ccd6fad42ba5f2dcea2be90
SHA1f14c670a6fca1ee6c41c147fe3fbede5b0371f1f
SHA256dea1369801620bcd929a2282ef11f27629a114b6d1f587f90984586316483fcc
SHA5126e19d8a4884d57dc53a1bcd7b31fa5a7acec5197593a1bd66c0a807b1a54b40ebcdf9cd78d9c8eb3d110c0287d0bee98a2424ee5fad2cec090f25a8480830f4e