Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/05/2024, 20:46

General

  • Target

    434a6cf797271f08868faf8d152f64ec04bb35e97f65396f22a5bbb6ffee509a.exe

  • Size

    14KB

  • MD5

    3c0b10cf5ccea6f91e5f07b2b94aba59

  • SHA1

    c11ce2b113a9ae3f65438f87a46614757655c76b

  • SHA256

    434a6cf797271f08868faf8d152f64ec04bb35e97f65396f22a5bbb6ffee509a

  • SHA512

    28085fa3fa9599823be27bd40963884179911a9c68cafd07d4ec6ea177c3bb63d913ffdf4de56aad9dc1b07e948bf9024c9c1fd8864f0fb0088744f83ffb1a63

  • SSDEEP

    192:mqKKgwXLr+C9E72+QJ5nBbtreQZpd67Rb0H5nWvjMqDE045HQ:AKrXWC9EEbpZGs5n2rDE045H

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\434a6cf797271f08868faf8d152f64ec04bb35e97f65396f22a5bbb6ffee509a.exe
    "C:\Users\Admin\AppData\Local\Temp\434a6cf797271f08868faf8d152f64ec04bb35e97f65396f22a5bbb6ffee509a.exe"
    1⤵
      PID:3676
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3676 -s 184
        2⤵
        • Program crash
        PID:4792
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3676 -ip 3676
      1⤵
        PID:3124

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3676-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB