Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24/05/2024, 04:03
Static task
static1
Behavioral task
behavioral1
Sample
071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe
Resource
win10v2004-20240508-en
General
-
Target
071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe
-
Size
1.5MB
-
MD5
4ce94fae6245d7cbba616b4cfdb400f0
-
SHA1
504182cd8398e0e2b8ab64d8b533854c1536ce49
-
SHA256
071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04
-
SHA512
e8174cdde7dd4f60a9d44da990c87cec118eb913e0e814e5614de942ceff184a2438034645a43f30845267f99ac8c03970233c9dad34e4212dd2faae02472991
-
SSDEEP
6144:vlevEBZe4DIQwZ76viJXpGqi/CJgFSrcCLuQer9JDcq+aRFb:voEBI48x6vRCWQLfq+y
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1960 2428 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2428 wrote to memory of 1960 2428 071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe 28 PID 2428 wrote to memory of 1960 2428 071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe 28 PID 2428 wrote to memory of 1960 2428 071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe 28 PID 2428 wrote to memory of 1960 2428 071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe"C:\Users\Admin\AppData\Local\Temp\071506068274a6110e652abf33eb34603b5b8da0cf54dc10df9714cd2d409f04.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2428 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2428 -s 2042⤵
- Program crash
PID:1960
-