Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

KRNLWRD/Bu....3.dll

windows11-21h2-x64

1

KRNLWRD/Sc...ET.dll

windows11-21h2-x64

1

KRNLWRD/autoexec.lnk

windows11-21h2-x64

3

KRNLWRD/injector.dll

windows11-21h2-x64

1

KRNLWRD/krnl.dll

windows11-21h2-x64

1

KRNLWRD/krnl.exe

windows11-21h2-x64

1

KRNLWRD/kr...xe.xml

windows11-21h2-x64

1

KRNLWRD/workspace.lnk

windows11-21h2-x64

3

Analysis

  • max time kernel
    90s
  • max time network
    99s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/05/2024, 11:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    KRNLWRD/krnl.exe

  • Size

    1.2MB

  • MD5

    fb3a52d1045b1a0298668f2d77680306

  • SHA1

    e16d5085977f1b895b7b2a046570b2da474add86

  • SHA256

    8869c44219364f911548cb18da0cc6413b3277d3a8a8df18d0a521b558830d6e

  • SHA512

    e19ce4c86ef8bf2ab25b4da67bf83acef5a8e688abfd3f96e8dec8169ce410c833df7685b6fb0b7489cf90ca51c56cd7264e8b2a94865aea5e5dacd4c5b7f44f

  • SSDEEP

    12288:LMqP5hP0pwI7+G70EE/0GGGGGGhGGGGxdoM43nwVkokbtkK:LZEpRC4ysGGGGGGhGGGGx1Vpstz

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe
    "C:\Users\Admin\AppData\Local\Temp\KRNLWRD\krnl.exe"
    1⤵
      PID:3808

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3808-0-0x000000007475E000-0x000000007475F000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3808-1-0x0000000000660000-0x0000000000796000-memory.dmp

      Filesize

      1.2MB

      Download

    • memory/3808-2-0x00000000058F0000-0x0000000005E96000-memory.dmp

      Filesize

      5.6MB

      Download

    • memory/3808-3-0x0000000005250000-0x00000000052E2000-memory.dmp

      Filesize

      584KB

      Download

    • memory/3808-5-0x0000000074750000-0x0000000074F01000-memory.dmp

      Filesize

      7.7MB

      Download

    • memory/3808-6-0x0000000074750000-0x0000000074F01000-memory.dmp

      Filesize

      7.7MB

      Download