Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
23/11/2022, 19:57
General
-
Target
43da26b78e3721554988e9342217f182a41e3bbb6cbab88a2a19140b5dc91f24.exe
-
Size
878KB
-
MD5
43baa89620f86b478a2a1a5ab0cf26b6
-
SHA1
b509c80c967004f89068f2fd71288745213922a5
-
SHA256
43da26b78e3721554988e9342217f182a41e3bbb6cbab88a2a19140b5dc91f24
-
SHA512
b5bbc5c483676378caf0924dbb49daf74138853f998d26ebdea9b481ec7bb8fdd260027d444bb595fead4087e7b0100be3ef1cfbe89ccadeae8969072aaa44f6
-
SSDEEP
24576:Gy6xKtQXsImJhl09rDZknOAXPlGYJoafCQRv7J+azdjnFN:j2K2XLmN09rNSfln/f5Rv7J+apjFN
Score
8/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\43da26b78e3721554988e9342217f182a41e3bbb6cbab88a2a19140b5dc91f24.exe"C:\Users\Admin\AppData\Local\Temp\43da26b78e3721554988e9342217f182a41e3bbb6cbab88a2a19140b5dc91f24.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3548 -s 8162⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3548 -ip 35481⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
2.6MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
2.6MB
-
Filesize
248KB