Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 18:08

General

  • Target

    015f75b426e39c87866b489ade36bfe52cbfd8411eb5de0b21dcdaa583aa766d.exe

  • Size

    340KB

  • MD5

    77a1653e8a932671e52e1928a5549a98

  • SHA1

    7d3fa72abde783f5c88d66b7b6ce4e79dbe5670a

  • SHA256

    015f75b426e39c87866b489ade36bfe52cbfd8411eb5de0b21dcdaa583aa766d

  • SHA512

    ee4f501c148e344a25d3dfda93bf228819d563b481745f565e18fb2327775d5c8d2c34a03730c0631cb17ae42a72c4eccce6af1566154e16557a0ddce6127cf4

  • SSDEEP

    3072:fn2GuUHwo8soECAKzAdHs2qxnCtnTF7d0CdyAfalUVn1/6D8CB+RTh2k:f9RVoNAKs9ltbdyPUVn1/PRN2k

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\015f75b426e39c87866b489ade36bfe52cbfd8411eb5de0b21dcdaa583aa766d.exe
    "C:\Users\Admin\AppData\Local\Temp\015f75b426e39c87866b489ade36bfe52cbfd8411eb5de0b21dcdaa583aa766d.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2168 -s 36
      2⤵
      • Program crash
      PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2168-0-0x0000000003960000-0x00000000039B5000-memory.dmp

    Filesize

    340KB