Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
27/06/2024, 18:15
General
-
Target
WaveWindows.exe
-
Size
7.5MB
-
MD5
cd34bf9c69f229818a4c9301e51435eb
-
SHA1
bfb95a5dc5d777e2b5940f354da271fed397adb2
-
SHA256
3b217daf815ced5cf1087d1f408fc3833c9d80a1e3e25b3f9041698b9e34216f
-
SHA512
2c68b211a4c8c144713cbe99214e8dc33d3ef6c1f244af4a313ff5ab93d946a4281d404b02c5f66ef5652071279649082877eaa728912a0e769c2c848e0a8e6b
-
SSDEEP
196608:KG5rY45g686QOL+rSrG6rBQ5I1NkSI4AtzLWFnI2RtCKkVJI55mm:KerY4G686QOSrSrXNkSMLYvz5J
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WaveWindows.exe"C:\Users\Admin\AppData\Local\Temp\WaveWindows.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3096 -s 10762⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3096 -ip 30961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
7.5MB
-
Filesize
7.7MB
-
Filesize
296KB
-
Filesize
144KB
-
Filesize
920KB
-
Filesize
472KB
-
Filesize
7.7MB