Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

067739fd0a...a6.exe

windows7-x64

3

067739fd0a...a6.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    134s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2022, 14:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    067739fd0a75c0663bdc715334aa72a6206180db605bb935da271f41ab9a36a6.exe

  • Size

    92KB

  • MD5

    704f61697a7f5fad8e3a900ae65a4c7b

  • SHA1

    cfc406da7e8f893ad7ed662a5ac99c1e559d3581

  • SHA256

    067739fd0a75c0663bdc715334aa72a6206180db605bb935da271f41ab9a36a6

  • SHA512

    243ee1843f0a6c647c96eab0426a4c89114d9b4e13a9513b0abf056c6317f4c047691a69ac557f56e91d7d63f53a366507343383b93a6f46b2027b0df866386b

  • SSDEEP

    1536:4dtOL5WlGHik/oIAvMPpdI2NUtCiOynmtH4lOZg:Sy5WlGHikwvcI2vi1sH9Zg

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\067739fd0a75c0663bdc715334aa72a6206180db605bb935da271f41ab9a36a6.exe
    "C:\Users\Admin\AppData\Local\Temp\067739fd0a75c0663bdc715334aa72a6206180db605bb935da271f41ab9a36a6.exe"
    1⤵
      PID:5008
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 404
        2⤵
        • Program crash
        PID:2076
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 408
        2⤵
        • Program crash
        PID:2136
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5008 -ip 5008
      1⤵
        PID:4988
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 5008 -ip 5008
        1⤵
          PID:2228

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/5008-132-0x0000000000400000-0x0000000000443000-memory.dmp

          Filesize

          268KB

          Download