Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
02/02/2024, 02:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
885f4a8ee6ccb6e9bbe48581fcc31b35.exe
Resource
win7-20231215-en
2 signatures
150 seconds
General
-
Target
885f4a8ee6ccb6e9bbe48581fcc31b35.exe
-
Size
180KB
-
MD5
885f4a8ee6ccb6e9bbe48581fcc31b35
-
SHA1
3efe1ac183c5a5409a1e64149db5b951d69291ff
-
SHA256
937e47ee0d3c308cfa1c64248db4d12c67ed97259b3d7706020a3759937648ec
-
SHA512
16941acb8d10a0a9acb3ce64e8db34a1090218b80dd45753d21b389d78beb5f81b63fe4f17cdb6f8ef7305ed6584c88d4ec2ac955b528e203cf9254e32757ab5
-
SSDEEP
3072:M1HqkyWxsFhpTgqDYVlkUEgdqw+TO3LSQPBobM5RDoSlogQB:OK3dNEzkvVQ5oARsX
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2288 wrote to memory of 2140 2288 885f4a8ee6ccb6e9bbe48581fcc31b35.exe 1 PID 2288 wrote to memory of 2140 2288 885f4a8ee6ccb6e9bbe48581fcc31b35.exe 1 PID 2288 wrote to memory of 2140 2288 885f4a8ee6ccb6e9bbe48581fcc31b35.exe 1 PID 2288 wrote to memory of 2140 2288 885f4a8ee6ccb6e9bbe48581fcc31b35.exe 1