Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

8238bdbe52...25.exe

windows7-x64

1

8238bdbe52...25.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    180s
  • max time network
    189s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 09:39 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8238bdbe524d37f238a4d9947afbee11d3ed70872261e6100efe425e4cedc125.exe

  • Size

    643KB

  • MD5

    202b5823dad33e398ab33c9faa4bb030

  • SHA1

    6eeb65a8a427d198a25e8ccd63553b355893d36f

  • SHA256

    8238bdbe524d37f238a4d9947afbee11d3ed70872261e6100efe425e4cedc125

  • SHA512

    33e6ca0ae3a5a89f7520211659e9f7d498b7822de37f25d9a61dc71239422a380dba131c75b6326ff2b3822245950ac348f224dd5416eada1afea24768fb5299

  • SSDEEP

    12288:3tQtpScpVpJgLa0qo158PCCFTFBkmzUJjyKEE9Sk2VWdh:9SpScpf0RECC5WFJnL

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8238bdbe524d37f238a4d9947afbee11d3ed70872261e6100efe425e4cedc125.exe
    "C:\Users\Admin\AppData\Local\Temp\8238bdbe524d37f238a4d9947afbee11d3ed70872261e6100efe425e4cedc125.exe"
    1⤵
      PID:4636
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4636 -s 516
        2⤵
        • Program crash
        PID:5080
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 4636 -ip 4636
      1⤵
        PID:2352

      Network

      • flag-unknown
        DNS
        97.97.242.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        97.97.242.52.in-addr.arpa
        IN PTR
        Response
      • flag-unknown
        DNS
        d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
        Remote address:
        8.8.8.8:53
        Request
        d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
        IN PTR
        Response
      • 209.197.3.8:80
        46 B
         40 B
         1
        1
      • 72.21.81.240:80
        260 B
         5
      • 72.21.81.240:80
        322 B
         7
      • 72.21.81.240:80
        322 B
         7
      • 72.21.81.240:80
        322 B
         7
      • 52.242.97.97:443
        260 B
         5
      • 104.80.225.205:443
        322 B
         7
      • 72.21.81.240:80
        260 B
         5
      • 72.21.81.240:80
        260 B
         5
      • 8.8.8.8:53
        97.97.242.52.in-addr.arpa
        dns
        71 B
         145 B
         1
        1

        DNS Request

        97.97.242.52.in-addr.arpa

      • 8.8.8.8:53
        d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
        dns
        118 B
         204 B
         1
        1

        DNS Request

        d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4636-132-0x0000000002310000-0x0000000002364000-memory.dmp

        Filesize

        336KB

        Download

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.