Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/02/2024, 01:17

General

  • Target

    69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe

  • Size

    183KB

  • MD5

    cf0c3af5f3557a19f2b2c7f796ae046a

  • SHA1

    9657803ff50b95acfbc0faa7cbd9cb2807770320

  • SHA256

    69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51

  • SHA512

    b5fe362a3df22f804cef05675ebce53465e71b0b6ffe42a1b9f67a95b6e435c62d85482426646ab802c750635dc6782b03984b9973c7bfb17b649b560222e49c

  • SSDEEP

    3072:h/xDazXrP63vAiFvhjyKnZJX00qJi7777777777777eX6l8FY3Bip71kVhHLY+jy:B4zXrioixZnZ3t7777777777777eu8Fv

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe
    "C:\Users\Admin\AppData\Local\Temp\69868df62146ef7c9c425e843ab6534247fbd875351f45dda2dbecd450fb4c51.exe"
    1⤵
      PID:4060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4060 -s 880
        2⤵
        • Program crash
        PID:1192
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4060 -ip 4060
      1⤵
        PID:1896

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4060-0-0x0000000000300000-0x0000000000334000-memory.dmp

        Filesize

        208KB

      • memory/4060-1-0x00000000751F0000-0x00000000759A0000-memory.dmp

        Filesize

        7.7MB

      • memory/4060-2-0x0000000005270000-0x0000000005814000-memory.dmp

        Filesize

        5.6MB

      • memory/4060-3-0x0000000004D60000-0x0000000004DF2000-memory.dmp

        Filesize

        584KB

      • memory/4060-4-0x00000000751F0000-0x00000000759A0000-memory.dmp

        Filesize

        7.7MB