Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    180s
  • max time network
    195s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 07:28

General

  • Target

    acedb877cdbd2da0d11871c3c08b28fe95dfa9b550431dcd164f22f285efe72c.exe

  • Size

    28KB

  • MD5

    610845b8923685aafa0d73a26331a14d

  • SHA1

    d53b505bb78e710ac777248cb050e5051de0ba24

  • SHA256

    acedb877cdbd2da0d11871c3c08b28fe95dfa9b550431dcd164f22f285efe72c

  • SHA512

    d42f509ed1a417988fbf2e486198c9ea9aaffe35f6f0ae5f3a23c0734a1685998ef3e153685db71ed419a41dad302f116a782eb0081a07f3702e310f0d5c1075

  • SSDEEP

    384:TeqTajVs51QzTwz9H7EvI09vzohXAn9Vt:32sTQzTwZwIuvCA9

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\acedb877cdbd2da0d11871c3c08b28fe95dfa9b550431dcd164f22f285efe72c.exe
    "C:\Users\Admin\AppData\Local\Temp\acedb877cdbd2da0d11871c3c08b28fe95dfa9b550431dcd164f22f285efe72c.exe"
    1⤵
      PID:1760
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1760 -s 252
        2⤵
        • Program crash
        PID:2824
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1760 -s 264
        2⤵
        • Program crash
        PID:4444
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1760 -ip 1760
      1⤵
        PID:100
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1760 -ip 1760
        1⤵
          PID:3564

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1760-132-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB

        • memory/1760-133-0x0000000000400000-0x0000000000414000-memory.dmp

          Filesize

          80KB