Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
27/03/2024, 04:02
Static task
static1
Behavioral task
behavioral1
Sample
e0b807cb5916d1cb695192b6fe0fe68b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e0b807cb5916d1cb695192b6fe0fe68b.exe
Resource
win10v2004-20240226-en
General
-
Target
e0b807cb5916d1cb695192b6fe0fe68b.exe
-
Size
20KB
-
MD5
e0b807cb5916d1cb695192b6fe0fe68b
-
SHA1
00b06dcfded8d5a2c44587dc03a61a64c3126595
-
SHA256
99b5471cfa38e2888c216c36ea21ac8ea4993d9ba491916a426d279166121a88
-
SHA512
d4682e803579df74c3834bce7476f896f2f48dfa55bebb7cd1591cd3b3e35266985455b1f105f802c04c09823f40fc54bf324b395060da3300316a45c024072e
-
SSDEEP
384:z2xEXhc199pEcfyL01dcSgBk0MrdIRCc+8JnUUbHk5jzFh5rVpiSqutxYvkR:z2xca9PlpMdAdV98FUoWjztBA8R
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 2740 set thread context of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 -
Suspicious use of WriteProcessMemory 9 IoCs
description pid Process procid_target PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28 PID 2740 wrote to memory of 1968 2740 e0b807cb5916d1cb695192b6fe0fe68b.exe 28
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD51b6d735fe40ad01b639be709deab5e8d
SHA1c05c8531c761dd21cdd7fb947141c5efd0f364ca
SHA2562ab2cfdb67fcff7d5447eb3875a4b52b021a682e7b1e646fd5b3f85ac9bb8773
SHA512a31060bc6b5c712fad011e726f52ff92733ce63bcbe798358e8568de249966ffedcccbc54cbf3bb6695c23f51ebca82cafabb9801b5a753090f9999bcacc09cd