Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

f39514887f...d4.exe

windows7-x64

3

f39514887f...d4.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2022, 02:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f39514887f5858b845973cc434cad98ca698fbab501e86f60574f947f0f292d4.exe

  • Size

    32KB

  • MD5

    3dfaf36e5eacb7e071231524947d7e98

  • SHA1

    a6018583598940be3447910a1986b0ebc23893b7

  • SHA256

    f39514887f5858b845973cc434cad98ca698fbab501e86f60574f947f0f292d4

  • SHA512

    819be351f04b37118aa722881de7de18f5d98fd411a4e3e91c26397164918ddcccd83486192ea986abf78730c024b35307ad79694c7c81b4306539d3b4f1fbfe

  • SSDEEP

    192:wyCimGWmtd3cehzBAIcyBmaEljQNDLWDuOFUbHkGwXPXAfho:wywGWmtd3/V3XB4VqWdFswIZo

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f39514887f5858b845973cc434cad98ca698fbab501e86f60574f947f0f292d4.exe
    "C:\Users\Admin\AppData\Local\Temp\f39514887f5858b845973cc434cad98ca698fbab501e86f60574f947f0f292d4.exe"
    1⤵
      PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 188
        2⤵
        • Program crash
        PID:1860
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 268
        2⤵
        • Program crash
        PID:812
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 5060 -ip 5060
      1⤵
        PID:2476
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5060 -ip 5060
        1⤵
          PID:856

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/5060-132-0x0000000000400000-0x0000000000422000-memory.dmp

          Filesize

          136KB

          Download

        • memory/5060-133-0x0000000000400000-0x0000000000422000-memory.dmp

          Filesize

          136KB

          Download