Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 05:23

General

  • Target

    4fb23c285ced767da23291fde647539b.exe

  • Size

    364KB

  • MD5

    4fb23c285ced767da23291fde647539b

  • SHA1

    dbd79b89524465ad6dd9a4f49f99dc21fbc6901f

  • SHA256

    75f2e32054d1680a663fa75412bcb48da2a053d4a579648fa46b78fe67a84ce1

  • SHA512

    21db8b2139a4ef83ae886e26c1e07ea8d368cf9abcbcd5d554f533ee077a30bfc76eb52c42f8d113400f975646493eb5b4310b95371e7dcea6f4198b3ac3dbf3

  • SSDEEP

    6144:z4GQ8+H9g/7erPYfdADCgOFUfWFBftG+YkF/Rlaa7BCMkE7ZvY:0kqWirQlWCgO+eFBftykflaa71kepY

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4fb23c285ced767da23291fde647539b.exe
    "C:\Users\Admin\AppData\Local\Temp\4fb23c285ced767da23291fde647539b.exe"
    1⤵
      PID:316
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 568
        2⤵
        • Program crash
        PID:5028
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 612
        2⤵
        • Program crash
        PID:1276
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 316 -ip 316
      1⤵
        PID:4132
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 316 -ip 316
        1⤵
          PID:1624

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/316-0-0x0000000000400000-0x0000000000469000-memory.dmp

          Filesize

          420KB

        • memory/316-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-10-0x0000000000400000-0x0000000000469000-memory.dmp

          Filesize

          420KB

        • memory/316-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/316-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB