Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

38dad5462f...89.exe

windows7-x64

3

38dad5462f...89.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    111s
  • max time network
    182s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 00:37 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    38dad5462f420c532f566ae3800f1647099db478ee0a1f23402e1834eec0c289.exe

  • Size

    232KB

  • MD5

    a32aadf8e71817d788deafaa753f2210

  • SHA1

    f837b84ef8eb50ee0578ff702b08747a5f3adeca

  • SHA256

    38dad5462f420c532f566ae3800f1647099db478ee0a1f23402e1834eec0c289

  • SHA512

    f4fc85cb866406a14d7d583fd6202928eb559d705bb5d3f4a60ae17e217773e591f931e5dc2c1ac3a56e163ff9bc9e5a8789ece4cdf7588b8737e01d6e6d1371

  • SSDEEP

    6144:Al5rxCfUT1iLihE8FARiZ3Cz+7dD+rKW1:AzNCfyiLihE86RiQz0dD+z

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38dad5462f420c532f566ae3800f1647099db478ee0a1f23402e1834eec0c289.exe
    "C:\Users\Admin\AppData\Local\Temp\38dad5462f420c532f566ae3800f1647099db478ee0a1f23402e1834eec0c289.exe"
    1⤵
      PID:4736
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4736 -s 524
        2⤵
        • Program crash
        PID:1176
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4736 -ip 4736
      1⤵
        PID:3416

      Network

      • flag-us
        DNS
        226.101.242.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        226.101.242.52.in-addr.arpa
        IN PTR
        Response
      • 93.184.220.29:80
        322 B
         7
      • 20.42.65.89:443
        322 B
         7
      • 104.110.191.133:80
        322 B
         7
      • 104.110.191.133:80
        322 B
         7
      • 8.8.8.8:53
        226.101.242.52.in-addr.arpa
        dns
        73 B
         147 B
         1
        1

        DNS Request

        226.101.242.52.in-addr.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4736-132-0x0000000000400000-0x0000000000462000-memory.dmp

        Filesize

        392KB

        Download

      • memory/4736-133-0x0000000000400000-0x0000000000462000-memory.dmp

        Filesize

        392KB

        Download

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.