Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

61073d4637...a1.exe

windows7-x64

6

61073d4637...a1.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    138s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230824-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/08/2023, 21:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61073d4637800d699217ff79b65a72949848869eb3b4dcc869d6d4e0cba642a1.exe

  • Size

    3.1MB

  • MD5

    8238a73843596c95f0de80b254395dde

  • SHA1

    3cf36e2f4b328d9db28f9c5a82d44d94f39deabb

  • SHA256

    61073d4637800d699217ff79b65a72949848869eb3b4dcc869d6d4e0cba642a1

  • SHA512

    53a0e1a7e12ef35a750410fe9bc5ee3f893683ccfbd66a4776f3887b6576cd0a0d836ada93a4a4e15131285766905d5dceebbbdd4209a9004cd5467ed305dac0

  • SSDEEP

    49152:6ObxQicLSjXU2opMfcIPozz2yHgQvXdCRduiOdZbhcI2I3N10STH40r6:WicLSjXVopqXPop3vXdCRwD4bI9mSTx

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\61073d4637800d699217ff79b65a72949848869eb3b4dcc869d6d4e0cba642a1.exe
    "C:\Users\Admin\AppData\Local\Temp\61073d4637800d699217ff79b65a72949848869eb3b4dcc869d6d4e0cba642a1.exe"
    1⤵
      PID:4592
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 340
        2⤵
        • Program crash
        PID:2676
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 348
        2⤵
        • Program crash
        PID:4976
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4592 -ip 4592
      1⤵
        PID:2820
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 4592 -ip 4592
        1⤵
          PID:2224

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4592-0-0x0000000000310000-0x00000000006285B2-memory.dmp

          Filesize

          3.1MB

          Download

        • memory/4592-1-0x0000000000310000-0x00000000006285B2-memory.dmp

          Filesize

          3.1MB

          Download