Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/03/2024, 09:40

General

  • Target

    b461d6c2ee91e30a81bc82ed84168b0d.exe

  • Size

    26KB

  • MD5

    b461d6c2ee91e30a81bc82ed84168b0d

  • SHA1

    03e3f94aad9760bab5b65cebd71ad03b54b7f4f5

  • SHA256

    f07ad8074d2626e12b969b10c0e65a1c2d83175a0f717db93d768e10dce46c0c

  • SHA512

    7f9d8b6b75b5309f2e1304363210a96d882b35bfb2051bbc8f594191e2353dc1422f500aacf2ca7cf5f3f96504e19d6c7229a74b3a26cf12e9e2d589bfef96b9

  • SSDEEP

    384:jOKOlGibzO5K+o8A+Q3Fo3+Gc0gz2GOzKIbjG+uclw6rN9zvL/VZ4IzWn:jONF/YRo1+Q0cTGRbjdL9vL/vfCn

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b461d6c2ee91e30a81bc82ed84168b0d.exe
    "C:\Users\Admin\AppData\Local\Temp\b461d6c2ee91e30a81bc82ed84168b0d.exe"
    1⤵
      PID:3388
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3388 -s 472
        2⤵
        • Program crash
        PID:3536
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3388 -ip 3388
      1⤵
        PID:3052

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3388-0-0x00000000021B0000-0x00000000021C0000-memory.dmp

        Filesize

        64KB