Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

ed4621af7f...41.exe

windows7-x64

3

ed4621af7f...41.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/12/2022, 03:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ed4621af7f8c7f0eea9bee54d5acf0d108c752232254d45227da1313ddf27141.exe

  • Size

    916KB

  • MD5

    053017dad195dce2bcae4ac2e941a8d0

  • SHA1

    4e639a992753fa2b7925e5ccff4528f63e9df3ae

  • SHA256

    ed4621af7f8c7f0eea9bee54d5acf0d108c752232254d45227da1313ddf27141

  • SHA512

    86f5307429bd193e1cfe194e8844a3c553e9b18208236b55f04a336ededc39d1ad1a91494dd0c1639d972923ae3e9cee8157ab70ff5b203ce1e205220fa8e9de

  • SSDEEP

    12288:fZOU58SlsSliSlb6XVDU1I+4+5+by/y/yS5sy/yS5syS5Z5Z5sy/yS5syS5syS5L:fZOxSlsSliSlyglaa2a2ea22S2s

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ed4621af7f8c7f0eea9bee54d5acf0d108c752232254d45227da1313ddf27141.exe
    "C:\Users\Admin\AppData\Local\Temp\ed4621af7f8c7f0eea9bee54d5acf0d108c752232254d45227da1313ddf27141.exe"
    1⤵
      PID:4732
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4732 -s 288
        2⤵
        • Program crash
        PID:1440
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4732 -ip 4732
      1⤵
        PID:4324

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4732-132-0x0000000000400000-0x000000000040E000-memory.dmp

        Filesize

        56KB

        Download

      • memory/4732-133-0x00000000020B0000-0x00000000020C1000-memory.dmp

        Filesize

        68KB

        Download

      • memory/4732-134-0x0000000000400000-0x000000000040E000-memory.dmp

        Filesize

        56KB

        Download