Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/10/2024, 12:47 UTC

241006-pz9trsvblp 3

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2024, 12:47 UTC

General

  • Target

    SynapseXRemake.exe

  • Size

    1.4MB

  • MD5

    c060b144806e5a53c8333f6d8c5aa03f

  • SHA1

    beabca85e6b87ac96c5ae62c8a7063e800a0a1f4

  • SHA256

    e39f1666b1569e9cf02b6073dfcba7cc6d2ed979357278b4aa01934e893d9256

  • SHA512

    80a5e4b1a5319db913988b528907d107fac589913ca3e4399940cf2e8d8d9085dcc6081330deb92d335703fd2850dfba80d753955831eaccc6ee7425e7072986

  • SSDEEP

    24576:jNap1BD9NBk2I0CSxOxuatcuFxazHjY/pYtiThWyqPnqHHOOniYtZo8fkVyFi:5aJ7CQCSExuUcyajjOvThWJqHHO0iSy2

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SynapseXRemake.exe
    "C:\Users\Admin\AppData\Local\Temp\SynapseXRemake.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2664
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2664 -s 892
      2⤵
        PID:2860

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2664-0-0x000007FEF6163000-0x000007FEF6164000-memory.dmp

      Filesize

      4KB

    • memory/2664-1-0x000000013F370000-0x000000013F4DA000-memory.dmp

      Filesize

      1.4MB

    • memory/2664-2-0x000000001B7F0000-0x000000001B930000-memory.dmp

      Filesize

      1.2MB

    • memory/2664-3-0x000007FEF6160000-0x000007FEF6B4C000-memory.dmp

      Filesize

      9.9MB

    • memory/2664-5-0x00000000007D0000-0x00000000007DA000-memory.dmp

      Filesize

      40KB

    • memory/2664-4-0x00000000007D0000-0x00000000007DA000-memory.dmp

      Filesize

      40KB

    • memory/2664-6-0x000007FEF6160000-0x000007FEF6B4C000-memory.dmp

      Filesize

      9.9MB

    • memory/2664-7-0x000007FEF6163000-0x000007FEF6164000-memory.dmp

      Filesize

      4KB

    • memory/2664-8-0x000007FEF6160000-0x000007FEF6B4C000-memory.dmp

      Filesize

      9.9MB

    • memory/2664-9-0x00000000007D0000-0x00000000007DA000-memory.dmp

      Filesize

      40KB

    • memory/2664-10-0x00000000007D0000-0x00000000007DA000-memory.dmp

      Filesize

      40KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.