Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

817930f9eb...6f.exe

windows7-x64

1

817930f9eb...6f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/05/2024, 23:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    817930f9eb4bb6478ca7ee63824b51d252811f55ff8936ad2d3f7d5df558bf6f.exe

  • Size

    62KB

  • MD5

    76f4a56940d5249cd4bdc41a7d120322

  • SHA1

    1ff7a044cdcffa94b584a73f573ca9b632128aeb

  • SHA256

    817930f9eb4bb6478ca7ee63824b51d252811f55ff8936ad2d3f7d5df558bf6f

  • SHA512

    e177ca722a42d9cd9c01031ea1829aa27b6853cc4b40d6b30f3228ef5bd7faa62c5e15dedd5f31d607674121c89114a47fbf0c84ea513a9519d65cfb6a4fee69

  • SSDEEP

    1536:9RRMGN/sHZ96Mi2Sg2pDteYgvyPCT0Y38C:jRvsHbS2Sx0Pv38C

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\817930f9eb4bb6478ca7ee63824b51d252811f55ff8936ad2d3f7d5df558bf6f.exe
    "C:\Users\Admin\AppData\Local\Temp\817930f9eb4bb6478ca7ee63824b51d252811f55ff8936ad2d3f7d5df558bf6f.exe"
    1⤵
      PID:1188
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1188 -s 184
        2⤵
        • Program crash
        PID:3700
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1188 -ip 1188
      1⤵
        PID:312

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1188-0-0x0000000002F90000-0x0000000002FB6000-memory.dmp

        Filesize

        152KB

        Download