Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

324bdba46d...c8.exe

windows7-x64

3

324bdba46d...c8.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/03/2023, 11:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    324bdba46dad7a6e0d2fd8c4cb3a9037d8aaf1d7827d6caab3ee3f752c8808c8.exe

  • Size

    1.6MB

  • MD5

    6e9ce81d2643be60339fad94bc8730c6

  • SHA1

    2119d379f64581353f6477bb0699b3807d4d6dad

  • SHA256

    324bdba46dad7a6e0d2fd8c4cb3a9037d8aaf1d7827d6caab3ee3f752c8808c8

  • SHA512

    7c2acef6803ce5e0d9174745481e24a93811bffaed224b9cf13cd85d4db0a8a339c1550570c0c5faa1d02f4eadf1b789a6d64755b3dfdacdecb50a0f374f3191

  • SSDEEP

    24576:KVrr0JloL2aeJEA9fPcbhZ98K7jH8lYSxpQMBCjZEJ5FT0zmH2jU9s:Kf+bhIWPxpVJzT0zmm3

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\324bdba46dad7a6e0d2fd8c4cb3a9037d8aaf1d7827d6caab3ee3f752c8808c8.exe
    "C:\Users\Admin\AppData\Local\Temp\324bdba46dad7a6e0d2fd8c4cb3a9037d8aaf1d7827d6caab3ee3f752c8808c8.exe"
    1⤵
      PID:1224
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1224 -s 528
        2⤵
        • Program crash
        PID:4772
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1224 -s 532
        2⤵
        • Program crash
        PID:664
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1224 -ip 1224
      1⤵
        PID:4428
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 1224 -ip 1224
        1⤵
          PID:4928

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1224-133-0x0000000000C40000-0x0000000000E0A000-memory.dmp

          Filesize

          1.8MB

          Download

        • memory/1224-134-0x0000000000C40000-0x0000000000E0A000-memory.dmp

          Filesize

          1.8MB

          Download