Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2ba5dac823...30.exe

windows7-x64

10

2ba5dac823...30.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 16:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2ba5dac82373e08ca0a91d328cdd0a30.exe

  • Size

    456KB

  • MD5

    2ba5dac82373e08ca0a91d328cdd0a30

  • SHA1

    9d294241f0ef398f454262d07037591e4fb871d9

  • SHA256

    00727d631a6474c7051cf5ddc13a8c7c079a0d547c0af99c40e117bc4e277987

  • SHA512

    816a0feac3649d8cef29814cfeb7663a7bed631cb2ffcdad4f0b86cde89d05d2e7e8650b9a95b0e288958c402e9e0755f1850c8abd4cb44ef2c5e0ad0d26c8c6

  • SSDEEP

    12288:sst3P2j5+5ZeObQWgxeT0uaSa8QZ7p5y:Jt3PE5gZebWfYujE7p

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ba5dac82373e08ca0a91d328cdd0a30.exe
    "C:\Users\Admin\AppData\Local\Temp\2ba5dac82373e08ca0a91d328cdd0a30.exe"
    1⤵
      PID:2968
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2968 -s 532
        2⤵
        • Program crash
        PID:1156
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2968 -ip 2968
      1⤵
        PID:4364

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2968-0-0x00000000005A0000-0x00000000005A6000-memory.dmp

        Filesize

        24KB

        Download

      • memory/2968-1-0x0000000000400000-0x00000000004C9000-memory.dmp

        Filesize

        804KB

        Download