Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24/01/2024, 19:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
72cdda8c677dece86d637b64dd657af0.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
72cdda8c677dece86d637b64dd657af0.exe
Resource
win10v2004-20231215-en
0 signatures
150 seconds
General
-
Target
72cdda8c677dece86d637b64dd657af0.exe
-
Size
6KB
-
MD5
72cdda8c677dece86d637b64dd657af0
-
SHA1
bfd9480612b65a352aeccde16965921de027436e
-
SHA256
6e7df456aae281fa546380351c4a626c17cadd08484341f24f8b309a564fa0c6
-
SHA512
5e11a4be84ab633b8bbc35ae4d1aa7f9dca35007e3d5bbc11bdd57f454ac776c072130d28ae0b020132f070016ca1ac54522e08b579134226b7f982428d47c5e
-
SSDEEP
96:qAckSFUCfMvdqiM6D5UhiDxtQ0+LQLmr5duutgDWLe1gbpzNt:FSFHfMv8iM6qwDxtb+L1Xu0L
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2268 wrote to memory of 1388 2268 72cdda8c677dece86d637b64dd657af0.exe 29 PID 2268 wrote to memory of 1388 2268 72cdda8c677dece86d637b64dd657af0.exe 29 PID 2268 wrote to memory of 1388 2268 72cdda8c677dece86d637b64dd657af0.exe 29
Processes
-
C:\Users\Admin\AppData\Local\Temp\72cdda8c677dece86d637b64dd657af0.exe"C:\Users\Admin\AppData\Local\Temp\72cdda8c677dece86d637b64dd657af0.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2268 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2268 -s 6202⤵PID:1388
-