Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

fe576c814d...77.exe

windows7-x64

7

fe576c814d...77.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    167s
  • max time network
    189s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 07:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fe576c814df71705203621e04fa73f1d14aaa149ec149ebac30f130720a92177.exe

  • Size

    126KB

  • MD5

    e536cb34b7e2e41bc3040a847cb776d4

  • SHA1

    8d203bcf74b4feb6a8ffc1ae05aa3ab3c20aae32

  • SHA256

    fe576c814df71705203621e04fa73f1d14aaa149ec149ebac30f130720a92177

  • SHA512

    b66598f91dc1077a3c2a3d3c9a892f0a63fe980f1a49be739c7b48fdfd3c0be6012416195b4afe382946563fed13b1d56555dfb0e8d6cd0eac6965a19271fd1a

  • SSDEEP

    1536:13L71KeIPHaNJwPDoDMhFaddOyaVqEUG/eVReZWhn0ranFw1JqtFuWScsY9MGMwS:13hIfErDVaVNkDEmFwit3lTS

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fe576c814df71705203621e04fa73f1d14aaa149ec149ebac30f130720a92177.exe
    "C:\Users\Admin\AppData\Local\Temp\fe576c814df71705203621e04fa73f1d14aaa149ec149ebac30f130720a92177.exe"
    1⤵
      PID:812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 812 -s 288
        2⤵
        • Program crash
        PID:820
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 812 -ip 812
      1⤵
        PID:960

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/812-132-0x0000000000400000-0x0000000000422000-memory.dmp

        Filesize

        136KB

        Download

      • memory/812-133-0x0000000002050000-0x000000000207D000-memory.dmp

        Filesize

        180KB

        Download

      • memory/812-134-0x0000000002050000-0x000000000207D000-memory.dmp

        Filesize

        180KB

        Download