Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19/07/2024, 20:45
General
-
Target
070158830c2983038611a6cf90083de0N.exe
-
Size
804KB
-
MD5
070158830c2983038611a6cf90083de0
-
SHA1
4542734b1ab2ff2b8ec2d3f9f896c2dd2f878279
-
SHA256
9337ee139460feab21b4b2add7fd9591ac946b5855728eebbd2ddf6280e198ae
-
SHA512
5ea6b4490b17d2858ecc77e252af6451a6c789096d57392b23ccf9e723e98a867d08b7f5da588db5f75cd170def8d7b60ffa4304a151003059ea7e59999a57c8
-
SSDEEP
24576:cLo1+QazkcE3yL3/cVu3mSK7LAmjUhCxvJC+CJ:cgf3+EUW97LhjUhyCvJ
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\070158830c2983038611a6cf90083de0N.exe"C:\Users\Admin\AppData\Local\Temp\070158830c2983038611a6cf90083de0N.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\070158830c2983038611a6cf90083de0N.exe"C:\Users\Admin\AppData\Local\Temp\070158830c2983038611a6cf90083de0N.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2008 -s 1843⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2008 -ip 20081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
568KB
-
Filesize
4KB
-
Filesize
832KB
-
Filesize
624KB
-
Filesize
56KB
-
Filesize
3.3MB
-
Filesize
280KB
-
Filesize
280KB