Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    92s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2022, 14:02 UTC

General

  • Target

    e69fddbd89918c6e9bb6179fd4627987cb493d0a6fa08c66a28824e26e0f7568.exe

  • Size

    224KB

  • MD5

    78eb53b51f52d8079b5b40bb921e3ae0

  • SHA1

    b8bd985b53bd80be059b5a0c87b49bee4e861c92

  • SHA256

    e69fddbd89918c6e9bb6179fd4627987cb493d0a6fa08c66a28824e26e0f7568

  • SHA512

    bcdf0dee648a5048f6548793803ce2827f78249d0c9d42e2a7c524a02be9c5b292bab5f82938a2e2e607b7f33bbb45431082ba164906dab6475fd0559ec5b331

  • SSDEEP

    1536:4GMQUW6+EMy2SgO2RfZ4HKsysy4LRNd81TFNDJCvG:J96+ny9gOcZ4HPysy4dj81T/DJCv

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e69fddbd89918c6e9bb6179fd4627987cb493d0a6fa08c66a28824e26e0f7568.exe
    "C:\Users\Admin\AppData\Local\Temp\e69fddbd89918c6e9bb6179fd4627987cb493d0a6fa08c66a28824e26e0f7568.exe"
    1⤵
      PID:4704
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4704 -s 224
        2⤵
        • Program crash
        PID:1232
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4704 -ip 4704
      1⤵
        PID:2692

      Network

        No results found
      • 104.80.225.205:443
        322 B
        7
      • 13.69.109.130:443
        322 B
        7
      • 178.79.208.1:80
        322 B
        7
      • 178.79.208.1:80
        322 B
        7
      • 178.79.208.1:80
        322 B
        7
      No results found

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4704-132-0x0000000000400000-0x0000000000438000-memory.dmp

        Filesize

        224KB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.