Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/07/2023, 17:24

General

  • Target

    inteldrv.xml

  • Size

    234B

  • MD5

    e9fdd6064fa88464ed0e2af07a17e5ee

  • SHA1

    1dcee5db10d1f158a10058f0c2c5c1160695c206

  • SHA256

    e0322f9e6818b6d3dd6e7b868caeb9032ffd8386ab639de4c17a1822d180b2b6

  • SHA512

    37387070d9271b6395462a752ae8259dff37199663bced59571f174cd1817575443a664ba54b29865386f7e56780fb1020293ee93e168d2444a992d048754ede

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\inteldrv.xml"
    1⤵
      PID:2716
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2716 -s 448
        2⤵
        • Program crash
        PID:4644
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 2716 -ip 2716
      1⤵
        PID:2920

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2716-133-0x00007FFD7C030000-0x00007FFD7C040000-memory.dmp

        Filesize

        64KB

      • memory/2716-134-0x00007FFDBBFB0000-0x00007FFDBC1A5000-memory.dmp

        Filesize

        2.0MB

      • memory/2716-135-0x00007FFDBBFB0000-0x00007FFDBC1A5000-memory.dmp

        Filesize

        2.0MB

      • memory/2716-136-0x00007FFDBBFB0000-0x00007FFDBC1A5000-memory.dmp

        Filesize

        2.0MB

      • memory/2716-137-0x00007FFDB9B70000-0x00007FFDB9E39000-memory.dmp

        Filesize

        2.8MB

      • memory/2716-138-0x00007FFD7C030000-0x00007FFD7C040000-memory.dmp

        Filesize

        64KB

      • memory/2716-139-0x00007FFDBBFB0000-0x00007FFDBC1A5000-memory.dmp

        Filesize

        2.0MB