Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

bcdb547003...5b.exe

windows7-x64

1

bcdb547003...5b.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    167s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2022, 12:26 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe

  • Size

    178KB

  • MD5

    5fb2acdebe2551b60a10f40ef849b122

  • SHA1

    6d2fb7dc197e46fc155561174101178b6c7f3e8c

  • SHA256

    bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b

  • SHA512

    0a00634bdce51212aa0345821bbcf1a05fb823d4707fff2503f05c18dd79ac132d6ae78de2f6929e3c4bbeb1ae3d1f6329f4c331a79335367d5e6f076632a9ea

  • SSDEEP

    3072:PEwpbu9rcFwq+dzzvPPD3CVsQqUUucIoCvgmXYZ5OJRvNjmNIFE4j:PEwpbUcFwq+dzrPPL8eRuqC4SYOLNjmM

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe
    "C:\Users\Admin\AppData\Local\Temp\bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe"
    1⤵
      PID:3304
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3304 -s 792
        2⤵
        • Program crash
        PID:1720
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3304 -ip 3304
      1⤵
        PID:4936

      Network

      • flag-us
        DNS
        nicovideo.jp
        bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe
        Remote address:
        8.8.8.8:53
        Request
        nicovideo.jp
        IN A
        Response
        nicovideo.jp
        IN A
        133.152.43.29
      • flag-us
        DNS
        kaixin001.com
        bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe
        Remote address:
        8.8.8.8:53
        Request
        kaixin001.com
        IN A
        Response
        kaixin001.com
        IN A
        140.143.114.22
        kaixin001.com
        IN A
        58.87.81.218
      • 8.238.20.126:80
        322 B
         7
      • 8.238.20.126:80
        322 B
         7
      • 8.253.208.120:80
        260 B
         5
      • 8.238.20.254:80
        260 B
         5
      • 8.253.208.120:80
        322 B
         7
      • 8.238.55.126:80
        46 B
         40 B
         1
        1
      • 8.8.8.8:53
        nicovideo.jp
        dns
        bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe
        58 B
         74 B
         1
        1

        DNS Request

        nicovideo.jp

        DNS Response

        133.152.43.29

      • 8.8.8.8:53
        kaixin001.com
        dns
        bcdb5470038096a980cae1a3903bf9f8b6ef4b1add328600c9a15c236301895b.exe
        59 B
         91 B
         1
        1

        DNS Request

        kaixin001.com

        DNS Response

        140.143.114.22
        58.87.81.218

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3304-133-0x0000000000400000-0x0000000000417000-memory.dmp

        Filesize

        92KB

        Download

      • memory/3304-136-0x0000000000400000-0x000000000042E000-memory.dmp

        Filesize

        184KB

        Download

      • memory/3304-137-0x0000000000400000-0x0000000000417000-memory.dmp

        Filesize

        92KB

        Download

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.