Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    92s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 09:05 UTC

General

  • Target

    2cf7b3e8431e46213461774f8008eb2356702b352b25a1ae361b9294d4db0938.exe

  • Size

    104KB

  • MD5

    455708824bb896e0956858cf4f9c5120

  • SHA1

    d36f5176707db0d7289a79bbfb381b661d0735fa

  • SHA256

    2cf7b3e8431e46213461774f8008eb2356702b352b25a1ae361b9294d4db0938

  • SHA512

    f4bbe492998e89c4577d035db4b204c05dbc1c523fd9e3b1ccdcbf9234586c3e0f8c7b623b548a8884d03375df36585e88951b72ab5a7f470d519dcb9b268e97

  • SSDEEP

    1536:QXiwshheUeactU+cWMvmdPQsjVxo9lX+qhxB6UTeT1QzKwa+MKzBvcy6R:TwP1d/cW7jVmz+qx6USJQLdvc1

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2cf7b3e8431e46213461774f8008eb2356702b352b25a1ae361b9294d4db0938.exe
    "C:\Users\Admin\AppData\Local\Temp\2cf7b3e8431e46213461774f8008eb2356702b352b25a1ae361b9294d4db0938.exe"
    1⤵
      PID:4604
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4604 -s 260
        2⤵
        • Program crash
        PID:2864
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4604 -ip 4604
      1⤵
        PID:632

      Network

        No results found
      • 209.197.3.8:80
        46 B
        40 B
        1
        1
      • 209.197.3.8:80
        46 B
        40 B
        1
        1
      • 104.80.225.205:443
        322 B
        7
      • 209.197.3.8:80
        322 B
        7
      • 209.197.3.8:80
        322 B
        7
      No results found

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4604-132-0x0000000002150000-0x0000000002154000-memory.dmp

        Filesize

        16KB

      • memory/4604-133-0x0000000000400000-0x000000000041A000-memory.dmp

        Filesize

        104KB

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.