Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2023, 11:23

General

  • Target

    easy_Benign_ffbecfa95ce14cf23dbc54a1fd0fdba50d2c7c8b76a517b543cadf9621e2da7f.dll

  • Size

    19KB

  • MD5

    7990f9fe0af08fef9b233c6d062b6f07

  • SHA1

    03a8ad71fb6ddcb6adbb6d83aa42dba2a37dbf3c

  • SHA256

    ffbecfa95ce14cf23dbc54a1fd0fdba50d2c7c8b76a517b543cadf9621e2da7f

  • SHA512

    5c1eb5b6dd1536ca0b6601cdadeffbbbc62f5bf971fb7824826d0bc2d0816113fc1378bd216878df93f16aff61eb0ef4ec64fe0d9912a448d92375d30337d215

  • SSDEEP

    192:Zh7d0SCU7jtibgXEAdx3Dzv7Kp+98aGWz89x0jd:/2U7jtRDzqW80j

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\easy_Benign_ffbecfa95ce14cf23dbc54a1fd0fdba50d2c7c8b76a517b543cadf9621e2da7f.dll,#1
    1⤵
      PID:3288
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3288 -s 224
        2⤵
        • Program crash
        PID:4124
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3288 -s 232
        2⤵
        • Program crash
        PID:1968
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 404 -p 3288 -ip 3288
      1⤵
        PID:2308
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -pss -s 448 -p 3288 -ip 3288
        1⤵
          PID:2876

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads