Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    127s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/08/2023, 02:26

General

  • Target

    7ff0cee1a64ccefc4fc3a2a703fc44216edea84703bcfe1883f5c542ed56bbf7.exe

  • Size

    3.8MB

  • MD5

    b49845265a7e8f36c0649b002976ee1f

  • SHA1

    53923a40dc3373873370e4df84f517d3f69ade1f

  • SHA256

    7ff0cee1a64ccefc4fc3a2a703fc44216edea84703bcfe1883f5c542ed56bbf7

  • SHA512

    e8b944ce4640e04d634c6704e29ac1556ac870120471fc6cff84f841f5f6dc100af80fc7c47d9dab1d1607b429b61beddcb74fa45612fcfc9f5022c8360397c8

  • SSDEEP

    49152:npXu6sosWUmDRMVu9BHkR4Zqe1CgJ+aQHeYAPVzhFfDkWUkj6GGvx0lRxCWMvm:pXu6s2UopIa8XC2

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ff0cee1a64ccefc4fc3a2a703fc44216edea84703bcfe1883f5c542ed56bbf7.exe
    "C:\Users\Admin\AppData\Local\Temp\7ff0cee1a64ccefc4fc3a2a703fc44216edea84703bcfe1883f5c542ed56bbf7.exe"
    1⤵
      PID:4520
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4520 -s 560
        2⤵
        • Program crash
        PID:4764
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4520 -s 568
        2⤵
        • Program crash
        PID:4988
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4520 -ip 4520
      1⤵
        PID:3736
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 4520 -ip 4520
        1⤵
          PID:3840

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4520-0-0x0000000000190000-0x000000000055D7AF-memory.dmp

          Filesize

          3.8MB

        • memory/4520-1-0x0000000000190000-0x000000000055D7AF-memory.dmp

          Filesize

          3.8MB