Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
07/11/2022, 19:23 UTC
General
-
Target
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2.exe
-
Size
136KB
-
MD5
0071573c4f66d7b1ce605fe194352156
-
SHA1
5dd5a4dff19d45dcf504eae73b48a63438543ec1
-
SHA256
a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2
-
SHA512
11130a6bfc503f4017af2af11fd1ff350cd46a19033685f5f426357063549ed953e5bdd52f711d71fa178fb00efaf29313ce3b0c0a1fda5c9ae195e3e41d6607
-
SSDEEP
3072:BPCUumUc6g7oWgsw/CjTimfWdVerSBuBnftu26:B6F0sCanRBuB
Score
8/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2.exe"C:\Users\Admin\AppData\Local\Temp\a0b86ba55e58f69d2b6475b87f4188ff32d9d7b0e6b040f4b490d64b99268af2.exe"1⤵
- Suspicious use of UnmapMainImage
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2128 -s 2722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2128 -ip 21281⤵
Network
- No results found
-
13.89.179.9:443 -
104.80.225.205:443 -
209.197.3.8:80
-
209.197.3.8:80
-
209.197.3.8:80
No results found
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
-
Filesize
60KB
-
Filesize
88KB
-
Filesize
88KB