Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
68s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11/06/2024, 17:20
Static task
static1
Behavioral task
behavioral1
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win7-20240508-en
Behavioral task
behavioral3
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win11-20240426-en
General
-
Target
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
-
Size
85KB
-
MD5
15cdabcecc4ae0ec3253b1625156b0a7
-
SHA1
fa1b2c6a2be53578ef278706cdee6f725e00b003
-
SHA256
6dbcc562d627628e45187afbd2421be88797e20e36910393a883e361973da553
-
SHA512
c9a1740bf5fed7cbc6d91ab92222b178fe4a8ab2d75dd8f18d827046bab88d7632b0751e953e77e29aaf9a9bf390697e94f23e172cfe034a4263bcf7c7149106
-
SSDEEP
1536:O3pQ59I3BbbHVlnOXrPBdfeISRAOl801AbcsqD95wSxdRf0:wQHMbb1lnOXrPXe7Yhq5Zs
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1688 wrote to memory of 2284 1688 cd57e4c171d6e8f5ea8b8f824a6a7316.exe 28 PID 1688 wrote to memory of 2284 1688 cd57e4c171d6e8f5ea8b8f824a6a7316.exe 28 PID 1688 wrote to memory of 2284 1688 cd57e4c171d6e8f5ea8b8f824a6a7316.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"C:\Users\Admin\AppData\Local\Temp\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1688 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1688 -s 6202⤵PID:2284
-
-
C:\Windows\system32\cmd.execmd /c ""C:\Users\Admin\Desktop\EnterUnblock.bat" "1⤵PID:2852