Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 08:37

General

  • Target

    7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f.exe

  • Size

    272KB

  • MD5

    7c880fac7b7102d8691ee31042e4bdc0

  • SHA1

    f3f1b3f6740fd1284ae72a7d31a6d896d08141d9

  • SHA256

    7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f

  • SHA512

    ab81c5f645aff27cc286bf5bf5208b4d605144ef7c95c96895b7c7d81ee75bf4929f6aa12fa70763b202653e143939764f12e1a8bbe8614103f74b8c37fd8898

  • SSDEEP

    6144:Taoex/JTc7V6cVcf8AIkGAVNo0ASy2kOjJSeGj22yBZbDjHUlPa:xeJ2V6cvPkGchA9gjFpfka

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Enumerates system info in registry 2 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f.exe
    "C:\Users\Admin\AppData\Local\Temp\7813278f33fc5bf80070d51f682f4056719058ace406e42586be2b0197fe584f.exe"
    1⤵
    • Enumerates system info in registry
    PID:2368
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 424
      2⤵
      • Program crash
      PID:4348
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2368 -ip 2368
    1⤵
      PID:648

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads