Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/06/2022, 01:03

220627-bevbpaadc9 10

26/06/2022, 22:58

220626-2xxsmsfga3 10

Analysis

  • max time kernel
    64s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    26/06/2022, 22:58

General

  • Target

    35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e.exe

  • Size

    240KB

  • MD5

    180332aa8761749cb03a06e000e614f2

  • SHA1

    4be7216002a0b13c2c7772728e1c0047f5d39f85

  • SHA256

    35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e

  • SHA512

    838b214cca0aa92987e01cb83aeabe5f5d404dc9d90332fee869c42883abe27a59f4e06c4939502f51ae8ac358f24f2ec866317fb52baea0e415b3ed383c61be

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e.exe
    "C:\Users\Admin\AppData\Local\Temp\35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e.exe"
    1⤵
      PID:3388
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3388 -s 520
        2⤵
        • Program crash
        PID:1812
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3388 -ip 3388
      1⤵
        PID:1220

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3388-130-0x0000000002230000-0x000000000225E000-memory.dmp

        Filesize

        184KB