Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

07/11/2024, 21:24

241107-z8z12ayfnb 8

07/11/2024, 21:23

241107-z8jdaa1pdl 6

07/11/2024, 21:21

241107-z7ptnsyjdx 7

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2024, 21:23

General

  • Target

    Delta V3.61/Delta.exe

  • Size

    17.0MB

  • MD5

    774ffee84d8e760761b8819edd2bc252

  • SHA1

    74ff2bcc3baf64790181b97dc09ab951d9440379

  • SHA256

    3c2cbcfb0dc0b92e1a0f15e725a1f8c4756a990e298098d94087cdd3fd491758

  • SHA512

    935624fdaa9ae57d4515a456a9383c20240988848046fcab69948450413e573167c0f17a456f0f5120ec13e3215759ad11c4857873900606116c3e495dd69650

  • SSDEEP

    196608:LOM8QZXcqPrn0guhegnueaIN3l4X+yBXeLUpcgwBj9aR:LOM8EmegnBaS1C+yBaUpcgwBj0

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Delta V3.61\Delta.exe
    "C:\Users\Admin\AppData\Local\Temp\Delta V3.61\Delta.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 808
      2⤵
      • Program crash
      PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3056-0-0x0000000074ACE000-0x0000000074ACF000-memory.dmp

    Filesize

    4KB

  • memory/3056-1-0x00000000012A0000-0x00000000023A6000-memory.dmp

    Filesize

    17.0MB

  • memory/3056-2-0x0000000074AC0000-0x00000000751AE000-memory.dmp

    Filesize

    6.9MB

  • memory/3056-3-0x0000000074AC0000-0x00000000751AE000-memory.dmp

    Filesize

    6.9MB

  • memory/3056-5-0x00000000003D0000-0x00000000003DA000-memory.dmp

    Filesize

    40KB

  • memory/3056-4-0x00000000003D0000-0x00000000003DA000-memory.dmp

    Filesize

    40KB

  • memory/3056-6-0x0000000074AC0000-0x00000000751AE000-memory.dmp

    Filesize

    6.9MB