Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    164s
  • max time network
    197s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/12/2022, 00:06

General

  • Target

    1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc.exe

  • Size

    299KB

  • MD5

    1e679c8c8d32493ca5fe30ab75facdb0

  • SHA1

    1e9b53f2f823dc918098801c7a7dbbbf4e07e579

  • SHA256

    1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc

  • SHA512

    8271076269ad74ee5aa56f6fc9f1d00286c8ed8d40114724018e70ebd992f65489b9ca24b5ed6e6e7183d4d9ae2dc90e7c92b38290aa6fa46029002a4ce02d14

  • SSDEEP

    3072:VXO42ZK/rUc+WmvohlclLtLjc+F3lywxXLLNjLSYrB5a4TqmOp0pkc9E2aNFf8:4KTUqjclLtf9xXLtfacD/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc.exe
    "C:\Users\Admin\AppData\Local\Temp\1b3d5fef90b907ee0b26aea8b603744f1a3f04544d380b93c377a386592fd6cc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1388
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1388 -s 728
      2⤵
      • Program crash
      PID:3760
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1388 -ip 1388
    1⤵
      PID:812

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads