Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
1s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
06/08/2024, 18:19
Behavioral task
behavioral1
Sample
app_v3.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
app_v3.exe
Resource
win10v2004-20240802-en
General
-
Target
app_v3.exe
-
Size
11.2MB
-
MD5
e16a889bf0a9308c8abc3827602af39f
-
SHA1
e201b6b4fb3f37d1865bba4b31559772066790c8
-
SHA256
234f3e03b213a8e243677870cbd64ff9ad8e1a031346f6b7e2f10cc0bdc508f5
-
SHA512
33c907dcf87fd0112eca0100e8a3db0720b2f24b1abb0c7ea4a41a9c4dfdbdfedb23ef00ea23c0974cb4c46021b2343bfbd7e431b4d18b04514fb36fbda06be2
-
SSDEEP
196608:/HfggdRyU3b01Kpn3V+uq+VvpoA1HeT39IigwCeE9TFa0Z8DOjCdyllOIQjZ/Roz:3ggTdL01+l+uq+Vvz1+TtIiFPY9Z8D8j
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2668 app_v3.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2960 wrote to memory of 2668 2960 app_v3.exe 30 PID 2960 wrote to memory of 2668 2960 app_v3.exe 30 PID 2960 wrote to memory of 2668 2960 app_v3.exe 30
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.6MB
MD53c388ce47c0d9117d2a50b3fa5ac981d
SHA1038484ff7460d03d1d36c23f0de4874cbaea2c48
SHA256c98ba3354a7d1f69bdca42560feec933ccba93afcc707391049a065e1079cddb
SHA512e529c5c1c028be01e44a156cd0e7cad0a24b5f91e5d34697fafc395b63e37780dc0fac8f4c5d075ad8fe4bd15d62a250b818ff3d4ead1e281530a4c7e3ce6d35