Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    92s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/05/2024, 19:39

General

  • Target

    235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe

  • Size

    184KB

  • MD5

    58d7130517fc7f2bafee35d084eba98d

  • SHA1

    56deb8259cffcbfd71eb46c1533b7789bbba110f

  • SHA256

    235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7

  • SHA512

    eb04131013c664743f3362f3513fe63a5aa710524c1b04ba52507908fb308942b48b00abae1e9cf743efa182bc119f4f0df9f5db7421f92e1ffc15685d91b072

  • SSDEEP

    1536:vBZi6jZ5YnK8o5x1pgSAvvwMjM9yvBc8omddhFD2kQftHhl5hCRxzp4dn3:5DInK8offgSQdjaW2AFDg1HhlAxFin3

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
    "C:\Users\Admin\AppData\Local\Temp\235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4236
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4236 -s 720
      2⤵
      • Program crash
      PID:5008
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4236 -ip 4236
    1⤵
      PID:556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads