Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

bebee034a8...45.exe

windows7-x64

10

bebee034a8...45.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    187s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 07:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bebee034a82fa71a1878ad5fea8ddffc1b8fe16c59cdc7281de0e7b320bc1245.exe

  • Size

    444KB

  • MD5

    03075256a8cdfdfee51638159b92c570

  • SHA1

    73da4920531377f6ea5c01aea9678c7c6ee2d89c

  • SHA256

    bebee034a82fa71a1878ad5fea8ddffc1b8fe16c59cdc7281de0e7b320bc1245

  • SHA512

    517eb1033d1ca3b85c7dac5a76917b9d5ff028188e039db12b19b528d58eaf4dd2036fa9798a8185025d36fcbdaf3b417b7dcfe3704227434655310cd1349367

  • SSDEEP

    6144:sLtyY6maCIFOWUlXyx30XufhdP97+jUBs0byMQFqqMQxw4SLGtj4At7kO0rKhPa:QymaUAJh3SNjMQxMQlftj4g7C83t

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bebee034a82fa71a1878ad5fea8ddffc1b8fe16c59cdc7281de0e7b320bc1245.exe
    "C:\Users\Admin\AppData\Local\Temp\bebee034a82fa71a1878ad5fea8ddffc1b8fe16c59cdc7281de0e7b320bc1245.exe"
    1⤵
      PID:3900
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3900 -s 504
        2⤵
        • Program crash
        PID:4088
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3900 -s 512
        2⤵
        • Program crash
        PID:4920
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 3900 -ip 3900
      1⤵
        PID:2488
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 3900 -ip 3900
        1⤵
          PID:1088

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3900-132-0x0000000000410000-0x00000000004E1000-memory.dmp

          Filesize

          836KB

          Download