Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

b12380deaf...6e.exe

windows7-x64

1

b12380deaf...6e.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 19:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b12380deaff6efcc81239ce293e29f68bc5cfc4c22c48188a0748cea5288be6e.exe

  • Size

    268KB

  • MD5

    b7751008a5a6d5c20c3dad786965d4af

  • SHA1

    1a07c619bf5497c9bc9c2bc0ec592eeb002999f3

  • SHA256

    b12380deaff6efcc81239ce293e29f68bc5cfc4c22c48188a0748cea5288be6e

  • SHA512

    d048c7eb9f4389e94c6d68af2710402056c40d59a8be04c7fb3d64d40ce55f5b0b977123988ad3fe58142009780805388a155b539f2096d0b25067a0b9d40292

  • SSDEEP

    6144:ydT98n/2xPnKEKhuPaHbOIBc2QUWUloOP7AdlTPmCWGprBSRdBjmHF:yRS+BnKEK4PYBVWUmOzSFtBSR6l

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b12380deaff6efcc81239ce293e29f68bc5cfc4c22c48188a0748cea5288be6e.exe
    "C:\Users\Admin\AppData\Local\Temp\b12380deaff6efcc81239ce293e29f68bc5cfc4c22c48188a0748cea5288be6e.exe"
    1⤵
      PID:5060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 716
        2⤵
        • Program crash
        PID:2308
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 724
        2⤵
        • Program crash
        PID:4716
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 5060 -ip 5060
      1⤵
        PID:4180
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 5060 -ip 5060
        1⤵
          PID:4904

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/5060-133-0x0000000000400000-0x000000000043B000-memory.dmp

          Filesize

          236KB

          Download

        • memory/5060-135-0x00000000022D0000-0x00000000022F2000-memory.dmp

          Filesize

          136KB

          Download