Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    129s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/02/2023, 20:26

General

  • Target

    1636-76-0x0000000000400000-0x000000000044A000-memory.exe

  • Size

    296KB

  • MD5

    bff0208b62ae227100f65b9b7bfeca3d

  • SHA1

    dc67cdd0193dc1241bbf90acebeb760c0e3a39c6

  • SHA256

    3c46341f5a50dc06e613def949980c458d0c1a05f5d401f7b22602df9b87bd45

  • SHA512

    2cd90b7a006e477e99bc87cb3a807eae434ea3e5943542aec4429f81dcafb5b8cc5e47e88ee0474b80e1785f18073b1387e99efa7f9adb4181039b7e0c23ce28

  • SSDEEP

    6144:MCteODDUzKekLV6Bta6dtJmakIM5IskxrgztsLP:Me3cELV6BtpmkFs2rct

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1636-76-0x0000000000400000-0x000000000044A000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1636-76-0x0000000000400000-0x000000000044A000-memory.exe"
    1⤵
      PID:4824
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4824 -s 84
        2⤵
        • Program crash
        PID:440
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4824 -ip 4824
      1⤵
        PID:1568

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads