Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

d495994232...d4.exe

windows7-x64

1

d495994232...d4.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    139s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/03/2024, 21:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d495994232afdcfe26dc88ba58ec7bd4.exe

  • Size

    38KB

  • MD5

    d495994232afdcfe26dc88ba58ec7bd4

  • SHA1

    8edefc59d20668f28b439d7d20d4d4a7abe0a645

  • SHA256

    e1321d622cb6543ce8314d39d271efdfa863f0f590da5582bc6e516ab3675a48

  • SHA512

    37591e1311b845a621c0ac0fa06ca15d0d293746ca6ff1b710921cd71403a2025a714c6de8d67e1b46ed926c33bb43c0f46a1f2deb3d7171ded94262f8cf420c

  • SSDEEP

    768:ItTUjOKaQIC/zdlQYEG3OHHZUladgtxdcQaWWDUUx373u5RtuWnJk9:uaO4BrcpZAaiRaWax375O29

Score
3/10

Malware Config

Signatures

  • Program crash 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d495994232afdcfe26dc88ba58ec7bd4.exe
    "C:\Users\Admin\AppData\Local\Temp\d495994232afdcfe26dc88ba58ec7bd4.exe"
    1⤵
      PID:4128
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4128 -s 436
        2⤵
        • Program crash
        PID:4496
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4128 -s 404
        2⤵
        • Program crash
        PID:1288
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4128 -s 472
        2⤵
        • Program crash
        PID:2044
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4128 -ip 4128
      1⤵
        PID:1680
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4128 -ip 4128
        1⤵
          PID:4904
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4128 -ip 4128
          1⤵
            PID:912

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4128-0-0x0000000013140000-0x00000000131844D8-memory.dmp

            Filesize

            273KB

            Download

          • memory/4128-1-0x0000000013140000-0x00000000131844D8-memory.dmp

            Filesize

            273KB

            Download

          • memory/4128-2-0x0000000013140000-0x00000000131844D8-memory.dmp

            Filesize

            273KB

            Download