Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    173s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 22:13

General

  • Target

    e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe

  • Size

    154KB

  • MD5

    90e34a3ba9a4ca2892884302ee1000a0

  • SHA1

    22c7c7542b108310735e16dfe8df762547b34fcf

  • SHA256

    e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676

  • SHA512

    2a36131fc91ae8cd27890d6b84e3c39666bf0175267888db9aced969dd311acdea5c4ff9496429b61692820b010d767dac1a61c8c831bd7bcb78df37ff23ce6d

  • SSDEEP

    3072:I0ViWhz161qE7dVeEuyXXu/MI0X42SDyRG/orReN:rMPxbCBG42dRG/T

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe
    "C:\Users\Admin\AppData\Local\Temp\e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe"
    1⤵
      PID:720
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 720 -s 428
        2⤵
        • Program crash
        PID:4808
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 720 -ip 720
      1⤵
        PID:620

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/720-133-0x0000000000400000-0x000000000046D000-memory.dmp

        Filesize

        436KB