Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2023, 14:22

General

  • Target

    23a81f55f79fc50c8d92b025e678b187fae1eda41db25ca63392c73f779e990f.exe

  • Size

    590KB

  • MD5

    be692c285c549ef1e8993b730dfff192

  • SHA1

    34828f0206c3b92816d433d10810a853c5e9aac5

  • SHA256

    23a81f55f79fc50c8d92b025e678b187fae1eda41db25ca63392c73f779e990f

  • SHA512

    a1f7a72dfa2b354d30527a34c8a423f45bfb53e9c8880e3d807d97086050af0c27f9153750e58e5c4c559f546bf1974a87186fcd8f1760875280aa445bf0efe0

  • SSDEEP

    12288:1AglbRfky6B+2C36Gvf3Q+YtV1uZ7Z8t82vTz1DBQ16g80Y/u:1Vlbht6BXy6G3QN8z8Pa16Sku

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\23a81f55f79fc50c8d92b025e678b187fae1eda41db25ca63392c73f779e990f.exe
    "C:\Users\Admin\AppData\Local\Temp\23a81f55f79fc50c8d92b025e678b187fae1eda41db25ca63392c73f779e990f.exe"
    1⤵
      PID:2292
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2292 -s 340
        2⤵
        • Program crash
        PID:4444
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2292 -ip 2292
      1⤵
        PID:1636

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2292-0-0x0000000000EB0000-0x0000000000FDC000-memory.dmp

        Filesize

        1.2MB

      • memory/2292-1-0x0000000000EB0000-0x0000000000FDC000-memory.dmp

        Filesize

        1.2MB

      • memory/2292-2-0x0000000000EB0000-0x0000000000FDC000-memory.dmp

        Filesize

        1.2MB