Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
03/11/2023, 13:30
General
-
Target
NEAS.1499ad98586ba85f11a63b1e96bcd6c0.exe
-
Size
14KB
-
MD5
1499ad98586ba85f11a63b1e96bcd6c0
-
SHA1
53adf125cf5d0daa6b125c8b10f4a85f4c5cbd42
-
SHA256
8dad3df1a32313e99a56da4bbf6f93a3660f455a2e4eb148b022476d726a207a
-
SHA512
bc6dc79f4517f5d9e7f3147e9e5ea288031095ca3be42d467ea4eab563d3bdc9597374cdfbc86df5a9e91437c415ce79894c6b4dc7e8617101b4d25f6329ead4
-
SSDEEP
192:QqrRKj4yHet3P8t8t8t8t8t8t8cKOYYYYY5Z+4GJhELqDE045HQcIIII:A4ket3PwwwwwwcjchFDE045HRIIII
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.1499ad98586ba85f11a63b1e96bcd6c0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.1499ad98586ba85f11a63b1e96bcd6c0.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3844 -s 2522⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3844 -ip 38441⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
40KB