Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    126s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/03/2024, 18:27

General

  • Target

    VapeV4+cracked.exe

  • Size

    1.2MB

  • MD5

    5a3f5cd00734de9dd95babd517e184ba

  • SHA1

    b829528df4fe07d27762c4a62b6732a4fafcd979

  • SHA256

    861c8727c8d0410d68b2cda7812f2ad1e5f0033f85340fe4baf3f70611d205b1

  • SHA512

    cb849b12deeb03d8c57a2c9885285ba9a7c092c18aee44d374135c2f397df988553d3d71f8baf82b022295130b918aea685bce85e87c2b903aab7e1f541b4b55

  • SSDEEP

    12288:qihb1dRbJ9sl/DN8MUMrsy1gQt16D6v9EYNP0gskAG95eZArtTtugk3majiG3C82:x9sFtrsYJt1zEG0rw

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VapeV4+cracked.exe
    "C:\Users\Admin\AppData\Local\Temp\VapeV4+cracked.exe"
    1⤵
      PID:4864
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 1076
        2⤵
        • Program crash
        PID:4716
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4864 -ip 4864
      1⤵
        PID:1392

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4864-0-0x0000000000600000-0x0000000000740000-memory.dmp

        Filesize

        1.2MB

      • memory/4864-1-0x0000000074EC0000-0x0000000075671000-memory.dmp

        Filesize

        7.7MB

      • memory/4864-2-0x0000000002BF0000-0x0000000002BF6000-memory.dmp

        Filesize

        24KB

      • memory/4864-3-0x0000000005320000-0x0000000005330000-memory.dmp

        Filesize

        64KB

      • memory/4864-4-0x0000000009E60000-0x000000000A406000-memory.dmp

        Filesize

        5.6MB

      • memory/4864-5-0x00000000053D0000-0x0000000005462000-memory.dmp

        Filesize

        584KB

      • memory/4864-6-0x0000000005330000-0x0000000005396000-memory.dmp

        Filesize

        408KB

      • memory/4864-7-0x0000000074EC0000-0x0000000075671000-memory.dmp

        Filesize

        7.7MB