Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

07/12/2024, 03:02

241207-djr38sylbk 10

Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/12/2024, 03:02

General

  • Target

    Bawless Windows Cracked By Vidhayakji786/Logs/rawdump_088E0000.exe

  • Size

    1KB

  • MD5

    9488bca89843d024ff0cf7ca8f54a140

  • SHA1

    11ca018efe5e35485b6966941910ae369fc4c9c8

  • SHA256

    b1fc48521d04d56e41ddef4f85b25ca174f3b46739834b914661d975ed421d0d

  • SHA512

    14170a2f031ef96e3f9850184e2a269ec7b6cf33ca70ccdb7e00a1b23f4b01cd7a8dda4e01c6b2b00b36ec6d3802fe8e4b6bb7b75c98d6035f47ee44384ad439

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bawless Windows Cracked By Vidhayakji786\Logs\rawdump_088E0000.exe
    "C:\Users\Admin\AppData\Local\Temp\Bawless Windows Cracked By Vidhayakji786\Logs\rawdump_088E0000.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
      dw20.exe -x -s 360
      2⤵
        PID:1948

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1732-0-0x000007FEF5EDE000-0x000007FEF5EDF000-memory.dmp

      Filesize

      4KB

    • memory/1732-1-0x000007FEF5C20000-0x000007FEF65BD000-memory.dmp

      Filesize

      9.6MB

    • memory/1732-3-0x000007FEF5C20000-0x000007FEF65BD000-memory.dmp

      Filesize

      9.6MB

    • memory/1948-2-0x0000000000570000-0x0000000000571000-memory.dmp

      Filesize

      4KB