Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

JSYZJ.exe

windows7-x64

3

JSYZJ.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2023, 08:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JSYZJ.exe

  • Size

    724KB

  • MD5

    3168ffd68bf181acb4d4b301cb842f3d

  • SHA1

    2f5d790f66d37b4387d10f4cf8a92a788be738dc

  • SHA256

    dfb6b348589efb406083311e23cb844bc446a85c01e9b9d32513637bddd94c44

  • SHA512

    6206ae423b46e5b7fdcf7ca3673a4ecc720f0e807f804f03eaeac932e9dc47b96953d82f26bbbfebde8525c906e6c96b437ba351c4a38d562fc4e7473721f24b

  • SSDEEP

    12288:X9DXaw/wGlcLyXQmJnzHRsbuNooJldpc5gmt/aqqqq9esHjdETNEbAi+akFgtme:Hpzmxaqqqq9HWli+aie

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JSYZJ.exe
    "C:\Users\Admin\AppData\Local\Temp\JSYZJ.exe"
    1⤵
      PID:260
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 260 -s 824
        2⤵
        • Program crash
        PID:1020
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 260 -ip 260
      1⤵
        PID:1880

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/260-133-0x0000000000220000-0x00000000002DA000-memory.dmp

        Filesize

        744KB

        Download

      • memory/260-134-0x0000000005190000-0x0000000005734000-memory.dmp

        Filesize

        5.6MB

        Download