Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

323137cfcc...AS.exe

windows7-x64

1

323137cfcc...AS.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    132s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 09:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    323137cfcc3e2ea7c31c25a0121085b0_NEAS.exe

  • Size

    14KB

  • MD5

    323137cfcc3e2ea7c31c25a0121085b0

  • SHA1

    234bd517514851ccec806221a2312f591195d573

  • SHA256

    573d61cdc0af62657518107011e912a96b67f50e3b6debf485fb6206803516c6

  • SHA512

    e2a960cfc2318e918e86cd4ffa8e7fc0d1cbe34e8910a986d889440f7b28d47e3c75211189294343bff0e1548f2ebd87e18e8359df4af4087b8f119660a239c4

  • SSDEEP

    384:LyaEnkoL/g1ES1ES1ES1ES1ES1EKO5O5O5O5O5O5O5OKtPdmDDE045H/JJJ:WaEkoLI1ES1ES1ES1ES1ES1EKO5O5O5X

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\323137cfcc3e2ea7c31c25a0121085b0_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\323137cfcc3e2ea7c31c25a0121085b0_NEAS.exe"
    1⤵
      PID:976
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 976 -s 216
        2⤵
        • Program crash
        PID:4252
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 976 -ip 976
      1⤵
        PID:2448

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/976-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB

        Download