Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    10s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    22/03/2025, 06:18

General

  • Target

    f2fe22a9b88a7181ef0a17fcbafba04ca86ac230251f2c02b3a2122056f7b8f7.exe

  • Size

    133KB

  • MD5

    521a4637ac2bd84bc35a869cb9ad98a1

  • SHA1

    59630f3b2c3aa5f10485556effa1fa59d805a977

  • SHA256

    f2fe22a9b88a7181ef0a17fcbafba04ca86ac230251f2c02b3a2122056f7b8f7

  • SHA512

    720c0d2a6b942ac2f148f01593ee82801fef14966486b01c846b196134b79b189f4ea9e778e5400649c853235f8871f365180c53a21f8a3a6aaf9240bbe4d62d

  • SSDEEP

    768:HQlFnwDpc9AWYs8Wb0atny6zmB+7AFZbrdlEjpAFZbrdlEjAaoBl3sTU:HQcanb0L6zm8sZHdlgCZHdlgAwI

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f2fe22a9b88a7181ef0a17fcbafba04ca86ac230251f2c02b3a2122056f7b8f7.exe
    "C:\Users\Admin\AppData\Local\Temp\f2fe22a9b88a7181ef0a17fcbafba04ca86ac230251f2c02b3a2122056f7b8f7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2580
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2580 -s 536
      2⤵
        PID:1652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2580-0-0x000007FEF6183000-0x000007FEF6184000-memory.dmp

      Filesize

      4KB

    • memory/2580-1-0x0000000000970000-0x0000000000998000-memory.dmp

      Filesize

      160KB