Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
30/08/2023, 20:57
General
-
Target
12d0a25ff848295cb292791889d1ff117de7c95adbc5cf7f4d666216e2ab495a.exe
-
Size
4.7MB
-
MD5
03a9ab49481700ca5158490a28207352
-
SHA1
9c9d69ec83a462ecaff20237ce6a8d2abecf7565
-
SHA256
12d0a25ff848295cb292791889d1ff117de7c95adbc5cf7f4d666216e2ab495a
-
SHA512
07965112399cee02c2d94d009d7bfa7af60e291be133c287b6e88d14c1f907862fccc5e416f05cf4073e6df2755c0f589be9a9400b28224a9ebbb087a80025c5
-
SSDEEP
98304:FzYQI5ti+0KDBqE6NYmnTvUUM1cBx1ZcJ0ztrxNNgkG:FJ+0+JNNc1ZrLWkG
Score
7/10
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\12d0a25ff848295cb292791889d1ff117de7c95adbc5cf7f4d666216e2ab495a.exe"C:\Users\Admin\AppData\Local\Temp\12d0a25ff848295cb292791889d1ff117de7c95adbc5cf7f4d666216e2ab495a.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4060 -s 7922⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4060 -ip 40601⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.9MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4.9MB
-
Filesize
248KB