Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
26/12/2023, 13:19
General
-
Target
71cc86a8f4d8769eaa2817545b34c5cc.exe
-
Size
323KB
-
MD5
71cc86a8f4d8769eaa2817545b34c5cc
-
SHA1
d696b3317bf55c9ed57d99eb9168879715e3fbbb
-
SHA256
d3ade37ffcc24578ce4e6154306eedc2534336d969c06cdc382f8216284c9a00
-
SHA512
15ec4883123af1f7e8fcd4d5132bbb7f3ba1edab77c29c8e0f41a62825dd8c2d015d29dd64a9873cf5470fcd1ef8c4f0a7173c729002f8da759b23cd00ec5e7d
-
SSDEEP
6144:IFhRONKpfOTyHGH1dB0GgkWLdWZR3Fa3n+m1ehxqs3wzaCRtBIYa:Gh0OfOTyHGHf8dYG0ms3LaBI
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\71cc86a8f4d8769eaa2817545b34c5cc.exe"C:\Users\Admin\AppData\Local\Temp\71cc86a8f4d8769eaa2817545b34c5cc.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 3882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 6722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1732 -ip 17321⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1732 -ip 17321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
736KB
-
Filesize
284KB
-
Filesize
736KB
-
Filesize
4KB
-
Filesize
424KB
-
Filesize
44KB
-
Filesize
736KB
-
Filesize
284KB
-
Filesize
736KB