Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2022, 00:59 UTC

General

  • Target

    b47acf935825e0cfaca3121e2727e31400c851265ed628fa2736767e0642d987.exe

  • Size

    47KB

  • MD5

    a15a4043562743264fa88f3576455eb0

  • SHA1

    98ed52960814c9beae79b70a18a929d92214721f

  • SHA256

    b47acf935825e0cfaca3121e2727e31400c851265ed628fa2736767e0642d987

  • SHA512

    e65913f23d44a313535b2c6878bd50eb3e169bdba50c175758a6b86407003c80f2c51a76feda9b8df74fe30dc5ebdcd40dee63a7ad2a7965b3a20d209123cc16

  • SSDEEP

    768:0ORCDthQTQW77BIaivJ/mncu+lWJPdPuWxIUygVRQy0LLjp7TJPjUO:TChQTQmB2vJ/4cHloFPXDyLy0bpq

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b47acf935825e0cfaca3121e2727e31400c851265ed628fa2736767e0642d987.exe
    "C:\Users\Admin\AppData\Local\Temp\b47acf935825e0cfaca3121e2727e31400c851265ed628fa2736767e0642d987.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4320
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4320 -s 324
      2⤵
      • Program crash
      PID:4828
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4320 -ip 4320
    1⤵
      PID:4776

    Network

      No results found
    • 72.21.91.29:80
      92 B
      80 B
      2
      2
    • 72.21.81.240:80
      46 B
      40 B
      1
      1
    • 93.184.220.29:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 20.189.173.13:443
      322 B
      7
    • 72.21.81.240:80
      46 B
      40 B
      1
      1
    • 87.248.202.1:80
      322 B
      7
    • 87.248.202.1:80
      322 B
      7
    • 87.248.202.1:80
      322 B
      7
    No results found

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4320-132-0x0000000000030000-0x0000000000036000-memory.dmp

      Filesize

      24KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.