Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/10/2024, 14:13 UTC

General

  • Target

    58260a6687486e39dc46461270b391280b7d59997d84b6639230d95e3bdfca23.exe

  • Size

    144KB

  • MD5

    80eeb191abe38686038db7946e49774c

  • SHA1

    49d136f1167ede48ebe38788030e40f8001f404a

  • SHA256

    58260a6687486e39dc46461270b391280b7d59997d84b6639230d95e3bdfca23

  • SHA512

    9df0a4ca0bea6f0f1a7e9f134fc67e68d1a52b0b2822e8a7e06c449d33993df2ba06bfb091190b311a40fc84208e14fb042cf98df140d87ede7056db575e56c1

  • SSDEEP

    3072:ZqJogYkcSNm9VoDPyhnBhMFE5fv0PfFYZZkT:Zq2kc4m9iDeBkEt0PfaH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\58260a6687486e39dc46461270b391280b7d59997d84b6639230d95e3bdfca23.exe
    "C:\Users\Admin\AppData\Local\Temp\58260a6687486e39dc46461270b391280b7d59997d84b6639230d95e3bdfca23.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 88
      2⤵
      • Program crash
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.