Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    164s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 07:47

General

  • Target

    9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe

  • Size

    491KB

  • MD5

    221ae11fe403214bb622239e167da338

  • SHA1

    e4aa8feaad11d000d4aa78c1e8f73b66a846db6b

  • SHA256

    9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16

  • SHA512

    912ebf840face9c2f6df95a6fe4dbfc2ce5e4b5e565bb17c380f608d066f53151cb8c4d19d3db9741307d6a30d470d368aa256eb18f4951c18de4000701431cd

  • SSDEEP

    6144:qidjIO3AgS+drsUq9N0lzr8M8iX/5MNbBz7HgTT4q5NTANRS28a0v4ADG+:qVO769NAl/5Mz7wMq5pANRSIA

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
    "C:\Users\Admin\AppData\Local\Temp\9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe"
    1⤵
      PID:4884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4884 -s 228
        2⤵
        • Program crash
        PID:2456
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4884 -s 236
        2⤵
        • Program crash
        PID:4688
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4884 -ip 4884
      1⤵
        PID:4292
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4884 -ip 4884
        1⤵
          PID:1636

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads