Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

c821dba0c3...34.exe

windows7-x64

8

c821dba0c3...34.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    92s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 06:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c821dba0c3d48f698a0cebef201e2097ff61afbbc84405a950017df0dffd6534.exe

  • Size

    298KB

  • MD5

    69081bb5759a0cdb6546bf42c96b442c

  • SHA1

    1c3cf37a91022a09d940bc6ff113abbac72f3f8e

  • SHA256

    c821dba0c3d48f698a0cebef201e2097ff61afbbc84405a950017df0dffd6534

  • SHA512

    32b42fdd0fb9137978b3efc8bd0bdef689d76ed40af75a5086717be1f2a1e7b076ca565fd6e33dc0ce189348acfcfa7a0f2de758c8899f4b7ade355babe53e83

  • SSDEEP

    3072:mGGSjZjkUjhB/y5cFMz//3+2Oeh4gVEnCsn689TeYbdPTLkou5ipyD8yPaqb9:kgbh4GMj/ueWgc5689Tpb5vko8iC/9

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c821dba0c3d48f698a0cebef201e2097ff61afbbc84405a950017df0dffd6534.exe
    "C:\Users\Admin\AppData\Local\Temp\c821dba0c3d48f698a0cebef201e2097ff61afbbc84405a950017df0dffd6534.exe"
    1⤵
      PID:4956
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 504
        2⤵
        • Program crash
        PID:816
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4956 -ip 4956
      1⤵
        PID:3548

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4956-132-0x0000000000400000-0x000000000044C000-memory.dmp

        Filesize

        304KB

        Download

      • memory/4956-133-0x0000000000400000-0x000000000044C000-memory.dmp

        Filesize

        304KB

        Download