Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

98b29be73a...a7.exe

windows7-x64

8

98b29be73a...a7.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    152s
  • max time network
    181s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 00:46 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    98b29be73a807b3dceacc44a5f7f54ebee48e7965adfda3b95ca625f64b974a7.exe

  • Size

    821KB

  • MD5

    cb65af542b5d698593cbfe73fca08fd1

  • SHA1

    6053567e5412b79b65c934e7b9b7318bcff0935b

  • SHA256

    98b29be73a807b3dceacc44a5f7f54ebee48e7965adfda3b95ca625f64b974a7

  • SHA512

    153869fae0788e2a6d693323979576dc0731e5c5c0f90b71363058600a760c70a29911834d8a2433ac17cf18114217745d9a83f515f17e880bab0c679b2c47bd

  • SSDEEP

    12288:oWWY10n3ZzXwa1r3RKdK5sfml4He7Y3oEw3DJG3AYevcNGw8e/zl6/fYxaqbJfC7:bWln3Fwa1LR0K5j4T4aA6n8erlAGcuX

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\98b29be73a807b3dceacc44a5f7f54ebee48e7965adfda3b95ca625f64b974a7.exe
    "C:\Users\Admin\AppData\Local\Temp\98b29be73a807b3dceacc44a5f7f54ebee48e7965adfda3b95ca625f64b974a7.exe"
    1⤵
      PID:2852
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2852 -s 852
        2⤵
        • Program crash
        PID:1708
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2852 -ip 2852
      1⤵
        PID:3384

      Network

      • flag-unknown
        DNS
        176.122.125.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        176.122.125.40.in-addr.arpa
        IN PTR
        Response
      • flag-unknown
        DNS
        0.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
        Remote address:
        8.8.8.8:53
        Request
        0.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
        IN PTR
        Response
      • 93.184.221.240:80
        322 B
         7
      • 93.184.221.240:80
        322 B
         7
      • 52.182.143.208:443
        322 B
         7
      • 20.190.160.14:443
        260 B
         5
      • 20.190.160.14:443
        260 B
         5
      • 93.184.221.240:80
        322 B
         7
      • 93.184.221.240:80
        322 B
         7
      • 8.8.8.8:53
        176.122.125.40.in-addr.arpa
        dns
        73 B
         159 B
         1
        1

        DNS Request

        176.122.125.40.in-addr.arpa

      • 8.8.8.8:53
        0.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
        dns
        118 B
         204 B
         1
        1

        DNS Request

        0.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.