Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    157s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 10:46

General

  • Target

    9fb36798a85a592be904c08d6e0a4b038ea56573ffd60bef0c95c7a82036ccbd.exe

  • Size

    95KB

  • MD5

    89892a8beaf52bb813e7eee826580fd3

  • SHA1

    42063a6ef1e18e6f8f0196cd1e2ebb1facc8e7fe

  • SHA256

    9fb36798a85a592be904c08d6e0a4b038ea56573ffd60bef0c95c7a82036ccbd

  • SHA512

    e896be34f22e77ddc84b80d71c5e015709ae7457b71d1501613aeb4c44395c285ec56e4f0b6556ebb6fa3fbbb00220d268fe9d608cf40db0c16ab64a68039989

  • SSDEEP

    1536:PJt/LWQa+NWAKxFN1Gt5lmDukVk+O9Vn91dnOWyG3iEoWTb4cQHHPXNX:PJRF9V91dOWyG3E9

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9fb36798a85a592be904c08d6e0a4b038ea56573ffd60bef0c95c7a82036ccbd.exe
    "C:\Users\Admin\AppData\Local\Temp\9fb36798a85a592be904c08d6e0a4b038ea56573ffd60bef0c95c7a82036ccbd.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3332
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 812
      2⤵
      • Program crash
      PID:5076
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3332 -ip 3332
    1⤵
      PID:4344

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3332-132-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

    • memory/3332-133-0x0000000000710000-0x0000000000720000-memory.dmp

      Filesize

      64KB

    • memory/3332-134-0x00000000022C0000-0x00000000022D0000-memory.dmp

      Filesize

      64KB

    • memory/3332-135-0x00000000022E0000-0x00000000022F0000-memory.dmp

      Filesize

      64KB

    • memory/3332-137-0x0000000002460000-0x0000000002470000-memory.dmp

      Filesize

      64KB

    • memory/3332-136-0x0000000002440000-0x0000000002450000-memory.dmp

      Filesize

      64KB

    • memory/3332-138-0x0000000002470000-0x0000000002480000-memory.dmp

      Filesize

      64KB

    • memory/3332-139-0x0000000002480000-0x0000000002490000-memory.dmp

      Filesize

      64KB

    • memory/3332-140-0x0000000002490000-0x00000000024A0000-memory.dmp

      Filesize

      64KB

    • memory/3332-141-0x00000000024A0000-0x00000000024B0000-memory.dmp

      Filesize

      64KB

    • memory/3332-142-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB