Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 16:10

General

  • Target

    bcac8096edb170b9aca1fd759a0ea2e8666815832e6dbeeff3a95ce3dafbe403.exe

  • Size

    1.3MB

  • MD5

    718d025d6d5acfd8d79ce1aab8867ca1

  • SHA1

    f643592f09ba18a069251c15ee9cd58d0b06c8a9

  • SHA256

    bcac8096edb170b9aca1fd759a0ea2e8666815832e6dbeeff3a95ce3dafbe403

  • SHA512

    7e2af3de5e8bb2c18a3d4f0029a0c77a124e4bb73d3ec3a1232627955102af9ac86adf2f0ede92b2c66c5bccf10189f0e85f13df153ba2c629599e4c2fb12b63

  • SSDEEP

    24576:4jHTGAgItSObli5bRJzLxUKJKQFxAEE+a+PhsxjqfNT9Jn2IEtKq5l6/G13Op3pW:8TzMGlUbRhtYgx++zh2qfJH1+poOXZ

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcac8096edb170b9aca1fd759a0ea2e8666815832e6dbeeff3a95ce3dafbe403.exe
    "C:\Users\Admin\AppData\Local\Temp\bcac8096edb170b9aca1fd759a0ea2e8666815832e6dbeeff3a95ce3dafbe403.exe"
    1⤵
      PID:4684
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 584
        2⤵
        • Program crash
        PID:4884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 604
        2⤵
        • Program crash
        PID:2248
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4684 -ip 4684
      1⤵
        PID:4988
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4684 -ip 4684
        1⤵
          PID:4712

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4684-132-0x0000000000400000-0x00000000005A0000-memory.dmp

          Filesize

          1.6MB

        • memory/4684-134-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-133-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-135-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-136-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-138-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-137-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-139-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-140-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-141-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/4684-142-0x0000000000400000-0x00000000005A0000-memory.dmp

          Filesize

          1.6MB

        • memory/4684-143-0x0000000000400000-0x00000000005A0000-memory.dmp

          Filesize

          1.6MB

        • memory/4684-144-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB