Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/01/2023, 07:44 UTC
General
-
Target
49d80ace4f7f63213b65aad185d0b466b3545c604c13256af86c861a8ccd7314.exe
-
Size
384KB
-
MD5
d9f3c2b67f40d203ba84917373aa35ba
-
SHA1
7b3512fd9398f53b880813d549ffec4c3517a4ef
-
SHA256
49d80ace4f7f63213b65aad185d0b466b3545c604c13256af86c861a8ccd7314
-
SHA512
875c836420eddd22a253275cf6440667f88b6bd5d8c1866bfd8af0340c7c0c0e34124caa940f255c503adfc2ec6b2981c53e0bc94e6a20078cd49826173999ef
-
SSDEEP
6144:vZ5o1x3qYyUovIYFJzcBnZ1aa3ChohfavF454IZCGrZ:vzoPbyIYF2BnZkho16ccGrZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\49d80ace4f7f63213b65aad185d0b466b3545c604c13256af86c861a8ccd7314.exe"C:\Users\Admin\AppData\Local\Temp\49d80ace4f7f63213b65aad185d0b466b3545c604c13256af86c861a8ccd7314.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5000 -s 1602⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 5000 -ip 50001⤵
Network
-
DNS226.101.242.52.in-addr.arpaRemote address:8.8.8.8:53Request226.101.242.52.in-addr.arpaIN PTRResponse
-
93.184.220.29:80
-
178.79.208.1:80
-
93.184.220.29:80
-
178.79.208.1:80
-
40.79.189.59:443
-
8.8.8.8:53226.101.242.52.in-addr.arpadns
DNS Request
226.101.242.52.in-addr.arpa