Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

c489bfd95c...b0.exe

windows7-x64

3

c489bfd95c...b0.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/12/2022, 02:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c489bfd95cb56f4dec54a088044ba41c54e22aeebbd7dbdf971edb66d13f3db0.exe

  • Size

    32KB

  • MD5

    e9677d2c0f3e74a8ee488889c468e25b

  • SHA1

    ad87b0f14b2d10189bd7a676df5e19119822fd0b

  • SHA256

    c489bfd95cb56f4dec54a088044ba41c54e22aeebbd7dbdf971edb66d13f3db0

  • SHA512

    92031eb549a4b7090f871c6b67d43818518882f7ea6c8056143384c8d0e9e8cdd5161f166defa53d827ca257b1ad2a1b7404a90fcb43a323671b84c3b1cf45d7

  • SSDEEP

    384:cVpkbaUKt9vGqiLG5tLuZE/NNVm70juAP:up/UKL+Puu+FNM79AP

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c489bfd95cb56f4dec54a088044ba41c54e22aeebbd7dbdf971edb66d13f3db0.exe
    "C:\Users\Admin\AppData\Local\Temp\c489bfd95cb56f4dec54a088044ba41c54e22aeebbd7dbdf971edb66d13f3db0.exe"
    1⤵
      PID:4972
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 252
        2⤵
        • Program crash
        PID:4244
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 264
        2⤵
        • Program crash
        PID:3796
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4972 -ip 4972
      1⤵
        PID:4584
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4972 -ip 4972
        1⤵
          PID:1664

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4972-132-0x0000000000400000-0x0000000000413000-memory.dmp

          Filesize

          76KB

          Download

        • memory/4972-133-0x0000000000400000-0x0000000000413000-memory.dmp

          Filesize

          76KB

          Download