Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

30/12/2024, 11:02

241230-m5lm1sxpcw 7

04/05/2023, 23:00

230504-2zcv9ahd71 10

Analysis

  • max time kernel
    2s
  • max time network
    21s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2024, 11:02

General

  • Target

    vadwax.exe

  • Size

    1205.9MB

  • MD5

    2bdd63a7fd97796129b56bd964c8af83

  • SHA1

    5ea8f5f06cb702b4e8d205cc08b860ffd2239c87

  • SHA256

    f91d9de259052595946250a1440a2457dbda9ee8aec8add24419ff939f13e003

  • SHA512

    f0383898783a2194e5a91de0d923a924787c40aa29f0095ef20bdef9e80ad515b7493edd1f5335b8c52e9b68469165103f92d6095a97a2e36a16f4b310582a7f

  • SSDEEP

    196608:HW36QOxQ8JEgOpcqGs4anqH4mJsMQOgKmEiTBh:S63Q8JExpIGnqYxMNmEiTf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vadwax.exe
    "C:\Users\Admin\AppData\Local\Temp\vadwax.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/804-0-0x000000000043E000-0x0000000000721000-memory.dmp

    Filesize

    2.9MB

  • memory/804-5-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/804-3-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/804-1-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/804-9-0x0000000000400000-0x0000000000D00000-memory.dmp

    Filesize

    9.0MB

  • memory/804-10-0x0000000000400000-0x0000000000D00000-memory.dmp

    Filesize

    9.0MB

  • memory/804-11-0x000000000043E000-0x0000000000721000-memory.dmp

    Filesize

    2.9MB

  • memory/804-12-0x0000000000400000-0x0000000000D00000-memory.dmp

    Filesize

    9.0MB