Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 02:03

General

  • Target

    4d0df014bc535bc49b17787ce7047d54.exe

  • Size

    277KB

  • MD5

    4d0df014bc535bc49b17787ce7047d54

  • SHA1

    96d5cf70c19863ee56787d6a56b36ff6429e9852

  • SHA256

    e95c2209169f8919d053263987d105ace654c7532d56444c9cdbd6f8b94e0dfd

  • SHA512

    bf378fe11c52396a80234bb45fa1b535d2d75636a8640956756579f16ff640039c2e369c0a26844029fc7324ffa0df14c1ae86bf4604cdb7cae277ca832a88ce

  • SSDEEP

    6144:4pS1cNwPLvoqg0R2VhPefm0ToHAY/rBCCtY09H7b3N7kq:4pS1c2obY7Mz9H7Rkq

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4d0df014bc535bc49b17787ce7047d54.exe
    "C:\Users\Admin\AppData\Local\Temp\4d0df014bc535bc49b17787ce7047d54.exe"
    1⤵
      PID:4832
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 476
        2⤵
        • Program crash
        PID:1904
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4832 -ip 4832
      1⤵
        PID:212

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4832-0-0x0000000000400000-0x000000000044C000-memory.dmp

        Filesize

        304KB

      • memory/4832-1-0x0000000002220000-0x0000000002270000-memory.dmp

        Filesize

        320KB

      • memory/4832-2-0x0000000002490000-0x0000000002491000-memory.dmp

        Filesize

        4KB

      • memory/4832-3-0x0000000002420000-0x0000000002421000-memory.dmp

        Filesize

        4KB

      • memory/4832-4-0x0000000002410000-0x0000000002411000-memory.dmp

        Filesize

        4KB

      • memory/4832-5-0x0000000002450000-0x0000000002451000-memory.dmp

        Filesize

        4KB

      • memory/4832-7-0x00000000024A0000-0x00000000024A1000-memory.dmp

        Filesize

        4KB

      • memory/4832-6-0x0000000002460000-0x0000000002461000-memory.dmp

        Filesize

        4KB

      • memory/4832-8-0x0000000002470000-0x0000000002471000-memory.dmp

        Filesize

        4KB

      • memory/4832-9-0x0000000002430000-0x0000000002431000-memory.dmp

        Filesize

        4KB

      • memory/4832-10-0x0000000002CA0000-0x0000000002CA2000-memory.dmp

        Filesize

        8KB

      • memory/4832-11-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

        Filesize

        4KB

      • memory/4832-12-0x0000000002C90000-0x0000000002C92000-memory.dmp

        Filesize

        8KB

      • memory/4832-13-0x0000000002400000-0x0000000002401000-memory.dmp

        Filesize

        4KB

      • memory/4832-14-0x0000000000400000-0x000000000044C000-memory.dmp

        Filesize

        304KB

      • memory/4832-15-0x0000000002220000-0x0000000002270000-memory.dmp

        Filesize

        320KB