Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/01/2024, 09:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
76fb8772aae4a46a2a798b9aa54f132f.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
76fb8772aae4a46a2a798b9aa54f132f.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
76fb8772aae4a46a2a798b9aa54f132f.exe
-
Size
9KB
-
MD5
76fb8772aae4a46a2a798b9aa54f132f
-
SHA1
42806e9daaf282e2a7ea9fa17857d1312d52a328
-
SHA256
4668728326da121c9ebb6edc1e1bb40d12ffd80e0d48828d47e460407bf0aed1
-
SHA512
8d66bb6ac8ce432ba9537bd7267ee717a0781d09ea9eec4e30e5d3dba05841c6e8cf493a856785ef407a6fec86b501dc8d052f1dceacf16ab2b15173bce99904
-
SSDEEP
192:Q/sCuVdyp9ta+SO7Lile+C54SjMdH7ksxlAxkuvjALXb/FGptu+/Z3W9:Gs5VUTB7QDSYNRAh8/wvZR3y
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3044 3036 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3036 wrote to memory of 3044 3036 76fb8772aae4a46a2a798b9aa54f132f.exe 28 PID 3036 wrote to memory of 3044 3036 76fb8772aae4a46a2a798b9aa54f132f.exe 28 PID 3036 wrote to memory of 3044 3036 76fb8772aae4a46a2a798b9aa54f132f.exe 28 PID 3036 wrote to memory of 3044 3036 76fb8772aae4a46a2a798b9aa54f132f.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\76fb8772aae4a46a2a798b9aa54f132f.exe"C:\Users\Admin\AppData\Local\Temp\76fb8772aae4a46a2a798b9aa54f132f.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3036 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 882⤵
- Program crash
PID:3044
-