Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 00:07

General

  • Target

    PG3DInjector.exe

  • Size

    76.1MB

  • MD5

    666d27360a5154c9797e3644f22a4a67

  • SHA1

    31b8aa2ef6eb33dbbb2fd1305114c806b854be35

  • SHA256

    f4055022c94103087ce5fe4ee8493bc11e6fb9c788134fc732aa9ff5d05cb765

  • SHA512

    042e32431b62d45a09b13f94f0699ec1d94b60c88705ca23ccbea9e939010bb99f98df437672694aa19e47a26aeb8f865a60053475b18d833ec6015b263dedbd

  • SSDEEP

    393216:lQeufzJiVWHIFrrmsx5lv8QshCe9dlkEBO2/w0XzN2FX7RIMnBZ1IQ0P543WbtZV:l5utHUrrm2DEQshjlYPDA5UUVIa2Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PG3DInjector.exe
    "C:\Users\Admin\AppData\Local\Temp\PG3DInjector.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2284
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2284 -s 596
      2⤵
        PID:2916

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2284-0-0x000000013FC77000-0x000000013FC79000-memory.dmp

      Filesize

      8KB

    • memory/2284-1-0x0000000002BE0000-0x0000000003070000-memory.dmp

      Filesize

      4.6MB

    • memory/2284-7-0x0000000005C20000-0x00000000087C0000-memory.dmp

      Filesize

      43.6MB

    • memory/2284-66-0x0000000003B50000-0x0000000003B60000-memory.dmp

      Filesize

      64KB

    • memory/2284-58-0x00000000025B0000-0x00000000025C0000-memory.dmp

      Filesize

      64KB

    • memory/2284-50-0x0000000003A80000-0x0000000003AB0000-memory.dmp

      Filesize

      192KB

    • memory/2284-46-0x0000000003A30000-0x0000000003A50000-memory.dmp

      Filesize

      128KB

    • memory/2284-42-0x0000000003970000-0x0000000003A30000-memory.dmp

      Filesize

      768KB

    • memory/2284-34-0x00000000034A0000-0x00000000034D0000-memory.dmp

      Filesize

      192KB

    • memory/2284-30-0x0000000001FD0000-0x0000000001FE0000-memory.dmp

      Filesize

      64KB

    • memory/2284-26-0x0000000002590000-0x00000000025B0000-memory.dmp

      Filesize

      128KB

    • memory/2284-22-0x00000000024B0000-0x0000000002560000-memory.dmp

      Filesize

      704KB

    • memory/2284-18-0x0000000002060000-0x0000000002080000-memory.dmp

      Filesize

      128KB

    • memory/2284-14-0x00000000002B0000-0x00000000002C0000-memory.dmp

      Filesize

      64KB

    • memory/2284-62-0x00000000037E0000-0x00000000037F0000-memory.dmp

      Filesize

      64KB

    • memory/2284-54-0x0000000003AE0000-0x0000000003B10000-memory.dmp

      Filesize

      192KB

    • memory/2284-38-0x0000000003520000-0x0000000003570000-memory.dmp

      Filesize

      320KB

    • memory/2284-10-0x0000000001EF0000-0x0000000001F30000-memory.dmp

      Filesize

      256KB