Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    270s
  • max time network
    317s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 07:47

General

  • Target

    8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe

  • Size

    483KB

  • MD5

    5dcbfb3333be6528a76d8b477c47b471

  • SHA1

    ed11fa3d735859951be3a23bb62aa854d4b01967

  • SHA256

    8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b

  • SHA512

    2f20d01a444cb8e6d493519bec9eafef29f43f78ed39ec0173dbcf509dc88bd04c39b7b7c863bdb7f9ad0952fcea4ea64ece6c224eb60243c3d38a4e3aa5095a

  • SSDEEP

    12288:c6kuRbbchsnLejxs2VmNDI0JZOQloMUWSNV:cUxnLeJVmNDI0WFMUn

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
    "C:\Users\Admin\AppData\Local\Temp\8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe"
    1⤵
      PID:2944
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 220
        2⤵
        • Program crash
        PID:2812
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 228
        2⤵
        • Program crash
        PID:1724
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2944 -ip 2944
      1⤵
        PID:3320
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2944 -ip 2944
        1⤵
          PID:1536

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads