Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/02/2024, 00:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8dcee95282f0b014639a828aee7098e1.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
8dcee95282f0b014639a828aee7098e1.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
8dcee95282f0b014639a828aee7098e1.exe
-
Size
28KB
-
MD5
8dcee95282f0b014639a828aee7098e1
-
SHA1
060ecef53e96fcf14cde9b468d4ac690794a190a
-
SHA256
71926747cd98026114de5b050afa12d3b59576f047fd055d1f5ca3fc10399bcd
-
SHA512
74a69a422d5d7f329e026cd870ac2908bfb282759c1fa3f4abeaf3fe883c65b89b318be8bdd5764834e76af3c2bc071adf5d59b378ec29ad96af24d6a566b53e
-
SSDEEP
384:sFyH905eSH8E1xvqXCO25jwHwAax4XltZfJGcMJxDTHfRmNZYV:sFxRO25Hx41tDMTDT/RmNe
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3292 wrote to memory of 1140 3292 8dcee95282f0b014639a828aee7098e1.exe 84 PID 3292 wrote to memory of 1140 3292 8dcee95282f0b014639a828aee7098e1.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\8dcee95282f0b014639a828aee7098e1.exe"C:\Users\Admin\AppData\Local\Temp\8dcee95282f0b014639a828aee7098e1.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3292 -
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe"2⤵PID:1140
-