Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    92s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 02:00

General

  • Target

    aec2809dc115650a1f93d658309a1a834c3c1acc2b95f26ad4af675e4741a2ad.dll

  • Size

    210KB

  • MD5

    25bb818bb7d27b9008d9b541d48f3835

  • SHA1

    a07038713b57598567b07e823a18d8fc375debea

  • SHA256

    aec2809dc115650a1f93d658309a1a834c3c1acc2b95f26ad4af675e4741a2ad

  • SHA512

    b2ab6ed0103f098132c56d4939e5c2acb1a95caeea34d57d9057f9a8695856915267e9d6bb3c2c34c7847aabe5ada49cd63012ebb0a2299491c5af9a94cd52b4

  • SSDEEP

    6144:yuhs22wUrh0p+J9cZtspaAwvl+ID6rhIhiuTm:yu+XwI0PZtEh6jWhJuTm

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\aec2809dc115650a1f93d658309a1a834c3c1acc2b95f26ad4af675e4741a2ad.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4372
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\aec2809dc115650a1f93d658309a1a834c3c1acc2b95f26ad4af675e4741a2ad.dll
      2⤵
        PID:4248
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4248 -s 596
          3⤵
          • Program crash
          PID:4216
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4248 -s 620
          3⤵
          • Program crash
          PID:4796
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4248 -ip 4248
      1⤵
        PID:1532
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4248 -ip 4248
        1⤵
          PID:3536

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads