Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    159s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 05:14

General

  • Target

    3034ab626093c71971c60166fb8bf3b9271dea010a1c53cc2bafc9e6157e3ab6.exe

  • Size

    155KB

  • MD5

    601dcd1d7f428fba116b7db6ee53a67f

  • SHA1

    020a828516eb702f356acdba0df908f72bc3fff0

  • SHA256

    3034ab626093c71971c60166fb8bf3b9271dea010a1c53cc2bafc9e6157e3ab6

  • SHA512

    04dbcb191699e1f391941c2ab14f31d5c28a46e6eb4fdba9fcfeecca048a8de0935ab6f709a88230b8fa429a7a226757a251fbf558e6ee8f9ad4d1b397735dd6

  • SSDEEP

    3072:6KCNTpuILvBicQ6/uOCsf057v3s1SlsH1yR8:6vNTkcl/uOCsf054uWyq

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3034ab626093c71971c60166fb8bf3b9271dea010a1c53cc2bafc9e6157e3ab6.exe
    "C:\Users\Admin\AppData\Local\Temp\3034ab626093c71971c60166fb8bf3b9271dea010a1c53cc2bafc9e6157e3ab6.exe"
    1⤵
      PID:3176
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3176 -s 328
        2⤵
        • Program crash
        PID:4808
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3176 -ip 3176
      1⤵
        PID:4904

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3176-132-0x0000000001000000-0x0000000001050000-memory.dmp

        Filesize

        320KB

      • memory/3176-133-0x0000000001000000-0x0000000001050000-memory.dmp

        Filesize

        320KB