Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    112s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 19:51 UTC

General

  • Target

    b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe

  • Size

    160KB

  • MD5

    a36795ac55f20ed0ffde8d98692aef20

  • SHA1

    8b53d97a65fbf77c72e8777267ca8a792092c28e

  • SHA256

    b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0

  • SHA512

    4b4a2762e7d3d9ae5c152b6fa588716fa6f4eb29f965b2e7188c241b3110d75c055b6072adf824eddb919deb16e35b5d9171a2070f561ac6c568725681779480

  • SSDEEP

    3072:TvJU8qJKCjW6slXu4kCPsSi9IWukjhGgfFxVnr97Ipm:Tv63Q+4kvIWuk9GgfFxVnJsw

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe
    "C:\Users\Admin\AppData\Local\Temp\b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe"
    1⤵
      PID:4308
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4308 -s 280
        2⤵
        • Program crash
        PID:4936
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4308 -ip 4308
      1⤵
        PID:4948

      Network

      • flag-us
        DNS
        226.101.242.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        226.101.242.52.in-addr.arpa
        IN PTR
        Response
      • 40.125.122.176:443
        104 B
        2
      • 40.79.141.153:443
        322 B
        7
      • 93.184.220.29:80
        322 B
        7
      • 93.184.221.240:80
        322 B
        7
      • 8.8.8.8:53
        226.101.242.52.in-addr.arpa
        dns
        73 B
        147 B
        1
        1

        DNS Request

        226.101.242.52.in-addr.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.