Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
183s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
07/12/2022, 03:54
General
-
Target
ed722c39067548d7c754f8a32eb30649020d509972bd8267d09c5764ea992925.exe
-
Size
64KB
-
MD5
18a2548ef2c7509db70bb9c6817da990
-
SHA1
d247979375ea4fd47e11f5b1a4d0aef3ba82440a
-
SHA256
ed722c39067548d7c754f8a32eb30649020d509972bd8267d09c5764ea992925
-
SHA512
988dd812de7b19e4f9dc398d0627ab87a6893c2d4db86b1c13babfb52ba227204050431c1689438470871d644de2f0bd942ed51d89cfe45400ab323bcec9990a
-
SSDEEP
768:Af33iSW+AYmNn8hnWDx87reBqfE9OlrcF0/0uCuyWPPW992haewy6Sgu9:03PvAV1gnWurwqs9Oq62xh6
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed722c39067548d7c754f8a32eb30649020d509972bd8267d09c5764ea992925.exe"C:\Users\Admin\AppData\Local\Temp\ed722c39067548d7c754f8a32eb30649020d509972bd8267d09c5764ea992925.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4908 -s 4802⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4908 -ip 49081⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
100KB
-
Filesize
100KB
-
Filesize
100KB