Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 01:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RarExtInstaller.exe
Resource
win7-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
RarExtInstaller.exe
Resource
win10v2004-20240508-en
7 signatures
150 seconds
General
-
Target
RarExtInstaller.exe
-
Size
748KB
-
MD5
683bb5cff5289f284448f387d5f1d531
-
SHA1
002e36e7321ceb50d44158bcfcae59575ee63da1
-
SHA256
a263a46b2e8e46c8d1a9d1202e8b6c10f818a743bd8337e0ef2e6b130a0cf100
-
SHA512
9c8b2667a67f6491221cb466932f27f0cc1ff7f49936b274dbfd99697452a7493a49f82ace54473c1d59ff99d5629f230fee9d5a88b16349a7e88d140a05f69d
-
SSDEEP
12288:V6AlwuMQ7p28E3F+ldQCg30ggGposKwWMSyAv33DALt4SQq7teFSd3ud1tgzoaBw:vlwOldQCg30lUosKwWMSP3DAL/p7tePN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2232 2460 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2460 wrote to memory of 2232 2460 RarExtInstaller.exe 28 PID 2460 wrote to memory of 2232 2460 RarExtInstaller.exe 28 PID 2460 wrote to memory of 2232 2460 RarExtInstaller.exe 28 PID 2460 wrote to memory of 2232 2460 RarExtInstaller.exe 28