Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

BLTools v2.4 (2).exe

windows7-x64

3

BLTools v2.4 (2).exe

windows10-2004-x64

3

Analysis

  • max time kernel
    144s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/07/2023, 11:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    BLTools v2.4 (2).exe

  • Size

    4.6MB

  • MD5

    c7f2e182794882c0450f6674439d983c

  • SHA1

    274bc5d7c138648b41c4b37ad43cc37e7e11f337

  • SHA256

    a42d9f80ef502f004ebd0b850164d9706da51359f1bd27dde891c66f4ba8e55b

  • SHA512

    e28eb29433df7690a61269dc10102e848abb479891345f49a9674c4c6e48a80f3f5875f53edd01b1eb4180e5ea8dfe2e2ff64eb94758297797225e5035ddc3e8

  • SSDEEP

    49152:FGgrwa1MiyqaK5fiQhX7JUQMhlFD9hOovMWPPxy40HQKg:DkqODhZMWPE4qXg

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BLTools v2.4 (2).exe
    "C:\Users\Admin\AppData\Local\Temp\BLTools v2.4 (2).exe"
    1⤵
      PID:3832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3832 -s 1076
        2⤵
        • Program crash
        PID:4696
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3832 -ip 3832
      1⤵
        PID:3972

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3832-133-0x00000000750D0000-0x0000000075880000-memory.dmp

        Filesize

        7.7MB

        Download

      • memory/3832-134-0x0000000000380000-0x000000000081A000-memory.dmp

        Filesize

        4.6MB

        Download

      • memory/3832-135-0x0000000002CC0000-0x0000000002CD0000-memory.dmp

        Filesize

        64KB

        Download

      • memory/3832-136-0x00000000750D0000-0x0000000075880000-memory.dmp

        Filesize

        7.7MB

        Download