Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/02/2024, 13:29

General

  • Target

    8c7133cb5817797ee71fd02f5e23a50d.exe

  • Size

    528KB

  • MD5

    8c7133cb5817797ee71fd02f5e23a50d

  • SHA1

    6db7cc8b11ac3320d53a6fcb21a04eb5d19902e1

  • SHA256

    e02f691b5697c4036a2635a6991c5ce007dbb6c180afa746d957d4510b4b8cb6

  • SHA512

    5c6e024b1fef86189c3f3a7bcb8a32d7cdfd10bc43df7316a6048d87883fb128a7090401a8069bfed20251029666a4a0296be493206ed9081137c0e646ce628e

  • SSDEEP

    12288:jvtMV9c+5cvqh5V7x3+NNgc56lVrCTORYAymwVUvrMU/:jveV9cMuG55YNGckqqN3Mq

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8c7133cb5817797ee71fd02f5e23a50d.exe
    "C:\Users\Admin\AppData\Local\Temp\8c7133cb5817797ee71fd02f5e23a50d.exe"
    1⤵
      PID:536
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 536 -s 560
        2⤵
        • Program crash
        PID:1380
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 536 -s 560
        2⤵
        • Program crash
        PID:4876
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 536 -ip 536
      1⤵
        PID:4996
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 536 -ip 536
        1⤵
          PID:4976

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/536-0-0x0000000000400000-0x000000000077A000-memory.dmp

          Filesize

          3.5MB

        • memory/536-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-10-0x0000000000400000-0x000000000077A000-memory.dmp

          Filesize

          3.5MB

        • memory/536-12-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

          Filesize

          368KB

        • memory/536-11-0x0000000000400000-0x000000000077A000-memory.dmp

          Filesize

          3.5MB