Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    190s
  • max time network
    210s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 08:11

General

  • Target

    55ee785f80670b5ad788a89f6c30a028657d90fba3a27ffeae7bd946b3b2ff1d.exe

  • Size

    28KB

  • MD5

    23edd00c6b55cb2f2b8ff4fdbc4f147d

  • SHA1

    101380a77b6ee3b9e299587212959e3960bcfa32

  • SHA256

    55ee785f80670b5ad788a89f6c30a028657d90fba3a27ffeae7bd946b3b2ff1d

  • SHA512

    91aa07159f2f02cdbe554618bb309e364cac8406af40bb1926b36667e66090e589420957beb851c7ad7ab0778fdf91db2b36446e185c109ec4b7cfd5353b3532

  • SSDEEP

    384:dzpPyvezWq2EcRGgi1d8FoBhSp8G8yYBBNKwCQnRwYUhGqxP9:5ovVG4GphvVBDLwYUhGi

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\55ee785f80670b5ad788a89f6c30a028657d90fba3a27ffeae7bd946b3b2ff1d.exe
    "C:\Users\Admin\AppData\Local\Temp\55ee785f80670b5ad788a89f6c30a028657d90fba3a27ffeae7bd946b3b2ff1d.exe"
    1⤵
      PID:4252
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 268
        2⤵
        • Program crash
        PID:1680
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 280
        2⤵
        • Program crash
        PID:1112
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4252 -ip 4252
      1⤵
        PID:5052
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4252 -ip 4252
        1⤵
          PID:4628

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4252-132-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB