Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/07/2023, 15:28

General

  • Target

    SimpleSoundPlayer.exe

  • Size

    186KB

  • MD5

    e18c92de4e40b0ae0a65ce7f808451be

  • SHA1

    4e90ba17b753f7f217d120cfb9f4afe6c6fe6ff9

  • SHA256

    99b5119ef01f59e93737c5e3154203d9c524fbd5aef2515df6faf2573b29f86b

  • SHA512

    98acf82a80ad5276b0d627f9f0aeb4cc2c7b486812bd38cb951978f17a204341ffbd80cd8a6d3d383cd7bedf8f0f0b9759fbc3abf97c9496c13f9b0f888381c0

  • SSDEEP

    768:0EugBxOxEqT4rrhPQXOKBwcHR6pBl3xYjfgrJci9doy0q/2PxEqT4rrhPQXOKBwL:02xysxPVKD4b8SoNqu7sxPVKD4b

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SimpleSoundPlayer.exe
    "C:\Users\Admin\AppData\Local\Temp\SimpleSoundPlayer.exe"
    1⤵
      PID:1056
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1056 -s 1180
        2⤵
        • Program crash
        PID:3136
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1056 -s 1180
        2⤵
        • Program crash
        PID:2016
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1056 -ip 1056
      1⤵
        PID:4332
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 1056 -ip 1056
        1⤵
          PID:3176

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1056-133-0x0000000075290000-0x0000000075A40000-memory.dmp

          Filesize

          7.7MB

        • memory/1056-134-0x0000000000170000-0x00000000001A4000-memory.dmp

          Filesize

          208KB

        • memory/1056-135-0x0000000005060000-0x0000000005604000-memory.dmp

          Filesize

          5.6MB

        • memory/1056-136-0x0000000004A00000-0x0000000004A92000-memory.dmp

          Filesize

          584KB

        • memory/1056-137-0x0000000004C40000-0x0000000004C50000-memory.dmp

          Filesize

          64KB

        • memory/1056-138-0x0000000004F30000-0x0000000004F3A000-memory.dmp

          Filesize

          40KB

        • memory/1056-139-0x0000000004F50000-0x0000000004F58000-memory.dmp

          Filesize

          32KB

        • memory/1056-140-0x0000000075290000-0x0000000075A40000-memory.dmp

          Filesize

          7.7MB