Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    177s
  • max time network
    199s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 03:25

General

  • Target

    50286b9613e1f2529fff417694aaf041.exe

  • Size

    695KB

  • MD5

    50286b9613e1f2529fff417694aaf041

  • SHA1

    581179d25efdf1e7fc65c7cb9a6c2f4c1227c2d9

  • SHA256

    dc1ac0dbfe9b9aedbded335cc862d8f6ccd9f29ff75c2db37d0f72297ce93b63

  • SHA512

    c7ef4e8a0ebba4ad40d5e443e587832b71a116f03bb4f64c489a9498be81858d8b1816b76ece94f6ada067427606690e7f3ffa7678e5190680a21313ed07988d

  • SSDEEP

    768:r1FrQT8UWFKjS0duZs7i8fo9FE5h1ERMc07GRwogIegTrU+UN9QSb:r16l9Y9FET1EllSogIegT49Qw

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\50286b9613e1f2529fff417694aaf041.exe
    "C:\Users\Admin\AppData\Local\Temp\50286b9613e1f2529fff417694aaf041.exe"
    1⤵
      PID:2224
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 220
        2⤵
        • Program crash
        PID:4108
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 224
        2⤵
        • Program crash
        PID:2080
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2224 -ip 2224
      1⤵
        PID:968
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 388 -p 2224 -ip 2224
        1⤵
          PID:1680

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads