Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 21:58

General

  • Target

    59c993c87936dc20f4ccfa50d89dd51209e013b901420fe5a11ec94bc3707656.exe

  • Size

    340KB

  • MD5

    84a1600f6b06a7ce25653a1dcae78bcb

  • SHA1

    dcc189a82e7a323898de792c9b34da7e25707a60

  • SHA256

    59c993c87936dc20f4ccfa50d89dd51209e013b901420fe5a11ec94bc3707656

  • SHA512

    1c9ac1be14a330ef9ec3bff0b21bcd0103dff5e00b8f57456c58abdec96f67ed3fcc07818c9f28828c376523ec740fbbe45da7ba48765c30ca575ca27998e963

  • SSDEEP

    3072:ibAbHwo8soECAKzAdHs2qxnCtnTF7d0CdyAfalUVn1/6D8CB+RTh2k:JVoNAKs9ltbdyPUVn1/PRN2k

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\59c993c87936dc20f4ccfa50d89dd51209e013b901420fe5a11ec94bc3707656.exe
    "C:\Users\Admin\AppData\Local\Temp\59c993c87936dc20f4ccfa50d89dd51209e013b901420fe5a11ec94bc3707656.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1868
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1868 -s 36
      2⤵
      • Program crash
      PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1868-0-0x00000000044E0000-0x0000000004535000-memory.dmp

    Filesize

    340KB