Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

65a6a7eb14...5a.exe

windows7-x64

8

65a6a7eb14...5a.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    107s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/01/2024, 17:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65a6a7eb140ac1c9ef0036af6880645a.exe

  • Size

    288KB

  • MD5

    65a6a7eb140ac1c9ef0036af6880645a

  • SHA1

    495a0a275b06b7db09b20adf32085d143143c590

  • SHA256

    20bfa115a8606b230d4e6a1fc7ca7fda8f623b0a783a0cfbfa09201a8ba63909

  • SHA512

    5595ddaafbb64f169a2af0b55ef96414b325505ae40c5aec169be0a8c2bfadf2e3dc594714f89829a8597de479cda1b746fb3784bc7f3632c75158e26a162795

  • SSDEEP

    6144:wejcki1BSRm6W2k5F0f2t6b+vClRHUcivtJOkRGP07ByaB22U9F/R:wejckifOm67oFZt6KqlKRvtJOkRGmwtJ

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\65a6a7eb140ac1c9ef0036af6880645a.exe
    "C:\Users\Admin\AppData\Local\Temp\65a6a7eb140ac1c9ef0036af6880645a.exe"
    1⤵
      PID:888
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 888 -s 300
        2⤵
        • Program crash
        PID:4240
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 888 -ip 888
      1⤵
        PID:2616

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/888-0-0x0000000002340000-0x0000000002349000-memory.dmp

        Filesize

        36KB

        Download

      • memory/888-1-0x0000000000400000-0x00000000005F7000-memory.dmp

        Filesize

        2.0MB

        Download