Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 06:39 UTC

General

  • Target

    KiwiX(vira)/Exec.dll

  • Size

    6.9MB

  • MD5

    1ed364cd6081f058fd52545e65f31fcd

  • SHA1

    d3cb3660b497d0a6c2e75bd7e679fee3641272fe

  • SHA256

    43830608991e3480dbd8cea33f7a968a388497df1bf2fe61d00ad60627231cbf

  • SHA512

    6f79120e4976dc9a659008535a86f691c511eac9da8919617591a3ae595ba25879f9e3ba455ea8cbfe479d35bb7405264ebdfd599aeb518d9f4861fe4d69bdbd

  • SSDEEP

    98304:du+mrLHJQOsgrMWnbLe9u/t8MmWOv/enGJGp8bHSpC24Gqdi:AdrLHJQhgrMWbq9VMmWGmnQGpvpZ43i

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\KiwiX(vira)\Exec.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1660
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1660 -s 96
      2⤵
        PID:2752

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.