Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    88s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2024, 02:13

General

  • Target

    32fdb74940a386a76cc8b319be690039847a49b3daa97600720d55f62e3ab7ad.exe

  • Size

    62KB

  • MD5

    588e6cedefe819b5ec9a187d047994d7

  • SHA1

    17df9ebab38753585e7d48b72c5deb1dad8c3b5e

  • SHA256

    32fdb74940a386a76cc8b319be690039847a49b3daa97600720d55f62e3ab7ad

  • SHA512

    d73f9d63f5f4a6605010260b997bc26da7669bfa01c54c3b828ed7cb53237ab9efcf0693e436c61162fc04e587557a64e73e7907bacce380fcfba2f19cab3fbc

  • SSDEEP

    1536:g7+EhewH91HBCnTniDH2psbesnWgqIpo:gBpHhCTQSsbemWPIpo

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\32fdb74940a386a76cc8b319be690039847a49b3daa97600720d55f62e3ab7ad.exe
    "C:\Users\Admin\AppData\Local\Temp\32fdb74940a386a76cc8b319be690039847a49b3daa97600720d55f62e3ab7ad.exe"
    1⤵
      PID:728
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 728 -s 1228
        2⤵
        • Program crash
        PID:680
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 728 -ip 728
      1⤵
        PID:4632

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/728-2-0x0000000005610000-0x000000000562A000-memory.dmp

        Filesize

        104KB

      • memory/728-3-0x0000000005DB0000-0x0000000006354000-memory.dmp

        Filesize

        5.6MB

      • memory/728-1-0x0000000074BE0000-0x0000000075390000-memory.dmp

        Filesize

        7.7MB

      • memory/728-0-0x0000000000D00000-0x0000000000D16000-memory.dmp

        Filesize

        88KB

      • memory/728-4-0x0000000005720000-0x00000000057B2000-memory.dmp

        Filesize

        584KB

      • memory/728-5-0x0000000005980000-0x0000000005990000-memory.dmp

        Filesize

        64KB

      • memory/728-6-0x00000000057E0000-0x00000000057EA000-memory.dmp

        Filesize

        40KB

      • memory/728-7-0x0000000006F10000-0x0000000006FAC000-memory.dmp

        Filesize

        624KB

      • memory/728-9-0x0000000074BE0000-0x0000000075390000-memory.dmp

        Filesize

        7.7MB