Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

c320ed6d85...1b.exe

windows7-x64

8

c320ed6d85...1b.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    112s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2022, 13:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c320ed6d858e387a12fcc4f5d84e07ad46f6791c6f9c1f024227e30e4f3b0e1b.exe

  • Size

    384KB

  • MD5

    96040df24c4eae1a5413ae157cada460

  • SHA1

    9c39ef3e9431d94c41d0c53d494df1e31d8888b8

  • SHA256

    c320ed6d858e387a12fcc4f5d84e07ad46f6791c6f9c1f024227e30e4f3b0e1b

  • SHA512

    1c110efd15af29b07351d5b318aebca93b5d80aceb08192abe24e79c0c64e31c27d52bbb2b025ca3c0bd35189b3b495daa898b78a06fb5255815234a13e230ed

  • SSDEEP

    6144:Dswx0GSZfhoIeD76xTZuNl3yGfgq8PEjY6hJk8nERdbYH/DnuoS2SsQLH5Ad0:Jx0LfWIeD7iFuNxy68PuzJ+R9YfCoS2S

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c320ed6d858e387a12fcc4f5d84e07ad46f6791c6f9c1f024227e30e4f3b0e1b.exe
    "C:\Users\Admin\AppData\Local\Temp\c320ed6d858e387a12fcc4f5d84e07ad46f6791c6f9c1f024227e30e4f3b0e1b.exe"
    1⤵
      PID:3904
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3904 -s 468
        2⤵
        • Program crash
        PID:4264
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3904 -ip 3904
      1⤵
        PID:4496

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3904-132-0x0000000000400000-0x0000000000553000-memory.dmp

        Filesize

        1.3MB

        Download

      • memory/3904-133-0x0000000000400000-0x0000000000553000-memory.dmp

        Filesize

        1.3MB

        Download