Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2022, 05:28

General

  • Target

    90611b042e35948dd2d57364e55c2499ba5fa44c17cd4c26d1b68499eebc4978.exe

  • Size

    151KB

  • MD5

    48db7140bde5100bb5b8db54af08cc98

  • SHA1

    99daf158abacd31178682e26df3d06fd1e7db3d0

  • SHA256

    90611b042e35948dd2d57364e55c2499ba5fa44c17cd4c26d1b68499eebc4978

  • SHA512

    10d220dee711b18801de37fa6b1689baa56b885fe6411f6037958b87839ca35e06bdd73f44da75772a365707ed626c4f510e176d1672273093fd5492ce98cd2b

  • SSDEEP

    3072:UX0IBKZb1tytqx6vOIdQiRyrDTZSMuz6kL1xm9dY4K2pWQnffXm:uBKx/ytqxBIyrpSMoZG9dY4KEX

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\90611b042e35948dd2d57364e55c2499ba5fa44c17cd4c26d1b68499eebc4978.exe
    "C:\Users\Admin\AppData\Local\Temp\90611b042e35948dd2d57364e55c2499ba5fa44c17cd4c26d1b68499eebc4978.exe"
    1⤵
      PID:4492
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 416
        2⤵
        • Program crash
        PID:580
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4492 -ip 4492
      1⤵
        PID:2156

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4492-132-0x0000000001000000-0x000000000104E000-memory.dmp

        Filesize

        312KB