Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

6730b7b825...e1.exe

windows7-x64

3

6730b7b825...e1.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    126s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 21:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe

  • Size

    13.0MB

  • MD5

    e162c6a728c92408753f2dc29e31808e

  • SHA1

    f256a997245f76029e5022b90c82e12150c6f835

  • SHA256

    6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1

  • SHA512

    650b993e0cb05a5dd58705d842139bd2885286d50ddbd79aee01cb2eead059c2e8ea71c7fc2f8ebc492daa4466dbaa5f35dddf12b6a0d7b8a19f3ff6e34ce221

  • SSDEEP

    98304:XJHvitZwtqDsW3E80DCV2bh2chsLzNIu+qoOzz8MFUD9xXf7YR7s:XNiZwtqAWv0DCVUvhsLyuFjz8nXzYR7s

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe
    "C:\Users\Admin\AppData\Local\Temp\6730b7b825e649b4c1efa0d5e7f267e6892305a651cdba057f2640e5256505e1.exe"
    1⤵
      PID:1564
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1564 -s 548
        2⤵
        • Program crash
        PID:2428
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1564 -ip 1564
      1⤵
        PID:1808

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1564-0-0x0000000000400000-0x00000000010FB000-memory.dmp

        Filesize

        13.0MB

        Download

      • memory/1564-1-0x0000000077630000-0x0000000077845000-memory.dmp

        Filesize

        2.1MB

        Download

      • memory/1564-3875-0x0000000000400000-0x00000000010FB000-memory.dmp

        Filesize

        13.0MB

        Download