Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

af643ceea9...0b.exe

windows7-x64

6

af643ceea9...0b.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230824-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/08/2023, 00:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    af643ceea984ea54f9412ae7f297aec15750e84fcad6adb9b1112e71187b790b.exe

  • Size

    438KB

  • MD5

    a16edf57a7eca9c3eeda1c85809b696f

  • SHA1

    3ddccf8b9b4196256fbc8577100f9c3cd2e8efc8

  • SHA256

    af643ceea984ea54f9412ae7f297aec15750e84fcad6adb9b1112e71187b790b

  • SHA512

    cf36c64b3dd96a645748aaec1e1c410707d3930b7ca26824948d64d8a668baf26c880ff42c43cf8de28b968a820b04740e5ca232be2d013a6cf37b47aec44b49

  • SSDEEP

    6144:O2qs9ft1o6Wyd+MmP+5YvdZue4AazGD/DgerXK8h:fFftSnyd+hBvdZayD/

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\af643ceea984ea54f9412ae7f297aec15750e84fcad6adb9b1112e71187b790b.exe
    "C:\Users\Admin\AppData\Local\Temp\af643ceea984ea54f9412ae7f297aec15750e84fcad6adb9b1112e71187b790b.exe"
    1⤵
      PID:4876
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 384
        2⤵
        • Program crash
        PID:528
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 428
        2⤵
        • Program crash
        PID:2636
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4876 -ip 4876
      1⤵
        PID:924
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4876 -ip 4876
        1⤵
          PID:216

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4876-0-0x0000000000FE0000-0x0000000001051643-memory.dmp

          Filesize

          453KB

          Download

        • memory/4876-1-0x0000000000FE0000-0x0000000001051643-memory.dmp

          Filesize

          453KB

          Download