Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    324s
  • max time network
    360s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 07:05

General

  • Target

    8047674acdb16de36566eaea3f21df373d7f741c7a2c2c3b31b87e7e725101cb.exe

  • Size

    97KB

  • MD5

    a3f08c2f1ed07c0cc2aed20d0f099361

  • SHA1

    24418ce005d3ce65ebeee449701ecec92ae6d7c0

  • SHA256

    8047674acdb16de36566eaea3f21df373d7f741c7a2c2c3b31b87e7e725101cb

  • SHA512

    81c6d0c9df7d1cb37561105c3488b9942022614cd0c98b34bff134861594dbc145750fb6904c737be205fc44965baaf3c9ba0096252a85bf47457fdc18eb5318

  • SSDEEP

    1536:XVXfGxKjqArOgFm7BYUfng9fMGQkINB1Eq:lXO2qwWZnkfIkIWq

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8047674acdb16de36566eaea3f21df373d7f741c7a2c2c3b31b87e7e725101cb.exe
    "C:\Users\Admin\AppData\Local\Temp\8047674acdb16de36566eaea3f21df373d7f741c7a2c2c3b31b87e7e725101cb.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2120 -s 472
      2⤵
      • Program crash
      PID:2080
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2120 -s 472
      2⤵
      • Program crash
      PID:2928
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2120 -ip 2120
    1⤵
      PID:3392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2120-132-0x0000000000400000-0x0000000000423000-memory.dmp

      Filesize

      140KB