Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    98s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 12:30

General

  • Target

    4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe

  • Size

    573KB

  • MD5

    91071af657e8f3ff71e5171e96d1b2e0

  • SHA1

    e9ccab81aaa323a6d53ea62f252aeb28745374b1

  • SHA256

    4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f

  • SHA512

    234a3a4227f808112a5f1a571c719e157987883afe657622ce0942661d70c7762fb9e302cf39aede322d8a7985c6b02a92040b5e10812f7b50b72501583b0191

  • SSDEEP

    6144:7tMcZQNxogdOmTq2tfBTgBcJhbn5s0bgGqvfNa6soxqw6U4k6+8rNp6t2:2hds2t5sBan5skgGsNns8fKrNp6E

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe
    "C:\Users\Admin\AppData\Local\Temp\4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe"
    1⤵
      PID:5044
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 716
        2⤵
        • Program crash
        PID:1368
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 760
        2⤵
        • Program crash
        PID:4380
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5044 -ip 5044
      1⤵
        PID:4892
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 5044 -ip 5044
        1⤵
          PID:1760

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads