Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/01/2024, 14:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
67e5526ec9b378f6d5f28b2a44f835ef.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
67e5526ec9b378f6d5f28b2a44f835ef.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
67e5526ec9b378f6d5f28b2a44f835ef.exe
-
Size
904KB
-
MD5
67e5526ec9b378f6d5f28b2a44f835ef
-
SHA1
9116c678bcb2d3ef48a3a6a2f5c2cc29d9d849d7
-
SHA256
f91f6a3529e12dee0bb32701b2232acf88d52718e1369519763bd3b6d409237a
-
SHA512
c665f36f80d7f779799e05aa015f2f7dd6187c4825588c1ecab4c89d65deda7fc258eed04459c7dfd6fe4ec54ba3b5ba19c8cccb6163603eb13935aec7a67ffb
-
SSDEEP
3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqv:hWtTBdsqEPxjjoFz9
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1988 2444 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2444 wrote to memory of 1988 2444 67e5526ec9b378f6d5f28b2a44f835ef.exe 28 PID 2444 wrote to memory of 1988 2444 67e5526ec9b378f6d5f28b2a44f835ef.exe 28 PID 2444 wrote to memory of 1988 2444 67e5526ec9b378f6d5f28b2a44f835ef.exe 28 PID 2444 wrote to memory of 1988 2444 67e5526ec9b378f6d5f28b2a44f835ef.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\67e5526ec9b378f6d5f28b2a44f835ef.exe"C:\Users\Admin\AppData\Local\Temp\67e5526ec9b378f6d5f28b2a44f835ef.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2444 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2444 -s 362⤵
- Program crash
PID:1988
-