Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
186s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 02:19 UTC
General
-
Target
81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe
-
Size
1.9MB
-
MD5
38ed1482a93e877aa73059ae4d0fa8c4
-
SHA1
c38f9632058d1a71a1679191406feb105553aa1a
-
SHA256
81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c
-
SHA512
55466f9b1ed75371c4855ff286e59a1e82f01a3cb45b21470ef229cb521c1768aadfee7aad4cbabfda0ca35df5c19bd035b85bf51383579b4aa69a585d6cc6b4
-
SSDEEP
49152:4xIjr6wPSFG2a0bDgfRFqT9EPvLI2ShrNDujwA:4qjr3S023Dg7qT+PBShBDQwA
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe"C:\Users\Admin\AppData\Local\Temp\81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 6402⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 6402⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 1556 -ip 15561⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1556 -ip 15561⤵
Network
-
DNS226.101.242.52.in-addr.arpaRemote address:8.8.8.8:53Request226.101.242.52.in-addr.arpaIN PTRResponse
-
72.21.91.29:80
-
72.21.91.29:80
-
20.50.73.10:443
-
104.80.225.205:443
-
93.184.221.240:80
-
93.184.221.240:80
-
93.184.221.240:80
-
8.8.8.8:53226.101.242.52.in-addr.arpadns
DNS Request
226.101.242.52.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.9MB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
368KB
-
Filesize
7.9MB
-
Filesize
368KB