Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/03/2024, 05:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bff67bcca3eb3768bfca1863fe3027fa.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bff67bcca3eb3768bfca1863fe3027fa.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
bff67bcca3eb3768bfca1863fe3027fa.exe
-
Size
116KB
-
MD5
bff67bcca3eb3768bfca1863fe3027fa
-
SHA1
52dc56ca9228808b2e4be1d2d58ce28cdb1df4e8
-
SHA256
e26153bf7070383f3556f980daaff525b73e52c89191f0741073c73a4cca3ee7
-
SHA512
1a1aa76d4d29cee18ba899321f4d3db4eb7d32e625214fb2b885f3e63eb98d5fd3f65ed7d295571f374e7c2d09de1c74feba3648864f894975b371414e02552b
-
SSDEEP
1536:hzeBR9laEzaAga2UGsf0l95rbg/ExQhwPbKC:FeBR0l9e/ExQ+b
Score
1/10
Malware Config
Signatures
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2748 bff67bcca3eb3768bfca1863fe3027fa.exe -
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28 PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28 PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28 PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28 PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28 PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28 PID 2748 wrote to memory of 2016 2748 bff67bcca3eb3768bfca1863fe3027fa.exe 28