Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

3d Cube.exe

windows7-x64

1

3d Cube.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/07/2024, 15:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3d Cube.exe

  • Size

    386KB

  • MD5

    e60b7761cd7921c3db59d3d8d1e275bf

  • SHA1

    bc84e83c4e10062d53e1580c3abffc7baa2f58bc

  • SHA256

    7be9823dd9169cb1a26ba0dbba759be609187ef1da80a0aa4859a9a7b21e44fc

  • SHA512

    360302d2e18302ad201b387f754e85bfa93545c11a4f7bc544c3bc21397a5c6153d07b0811ed64f4b9169eb3b0ceb95fc40a9e4b54693286013d0c490f2e104e

  • SSDEEP

    6144:jH3hnd2wCqFZm4kfnHpKSoVCJrMr1wx9k57pA3SOLmsL4m8:jH3pd2ospnkbCIT7q3St7

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d Cube.exe
    "C:\Users\Admin\AppData\Local\Temp\3d Cube.exe"
    1⤵
      PID:316
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 1036
        2⤵
        • Program crash
        PID:3136
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x33c 0x418
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:32
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 316 -ip 316
      1⤵
        PID:116

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/316-0-0x0000000000400000-0x0000000000460000-memory.dmp

        Filesize

        384KB

        Download