Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

9fe684543c...ac.exe

windows7-x64

1

9fe684543c...ac.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    159s
  • max time network
    200s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2022, 19:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9fe684543c5f4ff091e75a950d359859fc4e10c8778a8d2b51087b6bb0893fac.exe

  • Size

    769KB

  • MD5

    833e11f83a744f6a0cc0153c1b3bc3a3

  • SHA1

    3c28ccb50f74b2d69c9ea0317ed6580d05e69a02

  • SHA256

    9fe684543c5f4ff091e75a950d359859fc4e10c8778a8d2b51087b6bb0893fac

  • SHA512

    ca8f9e26bda8a091609b8966cda89e7dd0c70ec975cedbbad04ddaaceff99bddbf974f1e7cea0baa2d7487109eb1649adc82106773edf33ee5cc24ee1d92ed67

  • SSDEEP

    12288:rFeY2EuE4cpy9yAtCQ+0w2Trh7xLy9GvGm5+9PwrDhr+WstgzhyxqWIjIghHDR/:Arlkh8C9GvGmU9438WiOh2PgJF

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9fe684543c5f4ff091e75a950d359859fc4e10c8778a8d2b51087b6bb0893fac.exe
    "C:\Users\Admin\AppData\Local\Temp\9fe684543c5f4ff091e75a950d359859fc4e10c8778a8d2b51087b6bb0893fac.exe"
    1⤵
      PID:2116
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2116 -s 436
        2⤵
        • Program crash
        PID:3812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2116 -s 488
        2⤵
        • Program crash
        PID:1340
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2116 -ip 2116
      1⤵
        PID:1896
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2116 -ip 2116
        1⤵
          PID:4052

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2116-132-0x0000000000010000-0x00000000000D7000-memory.dmp

          Filesize

          796KB

          Download

        • memory/2116-133-0x0000000000010000-0x00000000000D7000-memory.dmp

          Filesize

          796KB

          Download