Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

16/10/2022, 11:14

221016-nccp3shea3 3

16/10/2022, 10:55

221016-mz55gahbhj 3

Analysis

  • max time kernel
    208s
  • max time network
    327s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/10/2022, 11:14

General

  • Target

    04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe

  • Size

    3.8MB

  • MD5

    5df97fbccd6a3c0964beed957a83b04b

  • SHA1

    fc09080750bcbe04177f4e386e62a34b91cabc68

  • SHA256

    04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2

  • SHA512

    dd1de4e22c41cca33acd9b297cef37d83f60e7fbbb1e344c4ea945d09472ea13bbfcc9f979cf1af6e814c7c52b298952c12b78246d0fce11be56286aea9cff90

  • SSDEEP

    49152:C2NoakGdjkMAjntrw7vCGfd+y8zaB8d6xlbXTsKbObmsZjyHvapbhB:nNoa7ZCG1T8mT3a6v+

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe
    "C:\Users\Admin\AppData\Local\Temp\04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe"
    1⤵
      PID:1660
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1660 -s 892
        2⤵
        • Program crash
        PID:1736
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 1660 -ip 1660
      1⤵
        PID:1556

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1660-132-0x000001ED7DFC0000-0x000001ED7E38A000-memory.dmp

        Filesize

        3.8MB

      • memory/1660-133-0x00007FFE99350000-0x00007FFE99E11000-memory.dmp

        Filesize

        10.8MB

      • memory/1660-134-0x00007FFE99350000-0x00007FFE99E11000-memory.dmp

        Filesize

        10.8MB

      • memory/1660-135-0x000001ED80480000-0x000001ED8094C000-memory.dmp

        Filesize

        4.8MB

      • memory/1660-136-0x00007FFE99350000-0x00007FFE99E11000-memory.dmp

        Filesize

        10.8MB