Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
19/06/2024, 21:50
Static task
static1
Behavioral task
behavioral1
Sample
SG_Windows_0.0.1/Snake Game.console.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
SG_Windows_0.0.1/Snake Game.console.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
SG_Windows_0.0.1/Snake Game.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
SG_Windows_0.0.1/Snake Game.exe
Resource
win10v2004-20240611-en
General
-
Target
SG_Windows_0.0.1/Snake Game.exe
-
Size
65.6MB
-
MD5
0b3b3d89edf069868efb5492b6f47877
-
SHA1
3e666c7a691165a92933e764d913b7ed8a8ba31e
-
SHA256
a166840e4e73b26c5c9f87c74db0bdf16bdb2fa61cd5c85000cd847f44181a4a
-
SHA512
91a9d9517b8893dd53358637ee2a1c1dd7436ecfd6af489190c3603422e453cc87add37d55b02aa47b25362bdc010a84c39420ce59c3560b0725941b1e31f8c8
-
SSDEEP
393216:R5I4QR1wab+lYZiGiq7ocg++NW8ofEEo35Ildqhu5cxUmD:R5InR1wavZis7jg++wdfE12bq
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2380 Snake Game.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2380 wrote to memory of 3044 2380 Snake Game.exe 28 PID 2380 wrote to memory of 3044 2380 Snake Game.exe 28 PID 2380 wrote to memory of 3044 2380 Snake Game.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\SG_Windows_0.0.1\Snake Game.exe"C:\Users\Admin\AppData\Local\Temp\SG_Windows_0.0.1\Snake Game.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2380 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2380 -s 1922⤵PID:3044
-