Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/12/2023, 19:53
General
-
Target
0efea478f54d341424106e290b0e70a6.exe
-
Size
3.4MB
-
MD5
0efea478f54d341424106e290b0e70a6
-
SHA1
82196f0e2ad9d0ed55579f965eeee5385b52a972
-
SHA256
33d34849f37b13edb8edc15c894973cecf4589890ff5f5cca99ae8a9e646cc34
-
SHA512
c544d3f7cffa7f917954fa297357c4391966eb338df7a037283ce9205af1fac734f8423758480739d8d4595c0e11919f750792ea3e712f5e54ecb949d8ab3605
-
SSDEEP
98304:5gSreyKFCHoFiAaNduHAmq7AskNzU1nqVtv8PL7:5gSreyKFCHoFiAaNduHAmq7DkNA1nqVe
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0efea478f54d341424106e290b0e70a6.exe"C:\Users\Admin\AppData\Local\Temp\0efea478f54d341424106e290b0e70a6.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\0efea478f54d341424106e290b0e70a6.exe"C:\Users\Admin\AppData\Local\Temp\0efea478f54d341424106e290b0e70a6.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 3763⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1628 -ip 16281⤵