Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

1e61b9efe3...c4.exe

windows7-x64

1

1e61b9efe3...c4.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/10/2023, 03:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1e61b9efe36ea4bf87ff08957fb32fc4.exe

  • Size

    1.4MB

  • MD5

    1e61b9efe36ea4bf87ff08957fb32fc4

  • SHA1

    048495d88b2dcff88428e10be78abf3e8209cb5b

  • SHA256

    68d9362e5c72da78824957e8e3fadc58f334b70e6764e01ced80027c2bf9d4df

  • SHA512

    5d1a588495460700d2a18b73029046b24f981b04f2e2228e67d3b5cfd1882c1699d514790373946ea5a3bc0b11c07a433a378c77dd4f5d7d292028ccce351f43

  • SSDEEP

    24576:L7Pj4cj6bpLUniTzjTy2fLwR03EAHoDpQxtRLKoH8MuJyKUs4c1xFOn7KHiEoSWv:3r4NLUniTrMxFOnWH3oSWyErzn

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e61b9efe36ea4bf87ff08957fb32fc4.exe
    "C:\Users\Admin\AppData\Local\Temp\1e61b9efe36ea4bf87ff08957fb32fc4.exe"
    1⤵
      PID:3644
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3644 -s 1348
        2⤵
        • Program crash
        PID:4952
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3644 -s 1360
        2⤵
        • Program crash
        PID:1924
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3644 -ip 3644
      1⤵
        PID:1800
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 3644 -ip 3644
        1⤵
          PID:3420

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3644-0-0x0000000000550000-0x00000000005CC000-memory.dmp

          Filesize

          496KB

          Download

        • memory/3644-6-0x0000000000550000-0x00000000005CC000-memory.dmp

          Filesize

          496KB

          Download