Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 19:22

General

  • Target

    952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4.exe

  • Size

    304KB

  • MD5

    537a444467d9a1460eaea26e903114c8

  • SHA1

    b5b5e0a83393e450619ea385d539c5f4cc474cde

  • SHA256

    952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4

  • SHA512

    f4dad3c64e2067654ef1ad51e53e9c280e7554e536311c241d2082440658cf6934df1475d4cee1410018567700d9331d5591ab575f81041a47dbfd174f0db639

  • SSDEEP

    3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4.exe
    "C:\Users\Admin\AppData\Local\Temp\952a7780818be424eba362e317d27952ceec9dee8fec26d3b0fff111f1fb3dd4.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4996
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 464
      2⤵
      • Program crash
      PID:3944
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4996 -ip 4996
    1⤵
      PID:4960

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads