Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

5

lOl Cheat.rar

windows11-21h2-x64

5

BUTTERCUPM...er.exe

windows11-21h2-x64

1

BUTTERCUPM...ol.exe

windows11-21h2-x64

5

out.exe

windows11-21h2-x64

3

Resubmissions

05/01/2025, 11:38

250105-nr4gcasrb1 5

05/01/2025, 11:35

250105-np6hxssqgt 7

Analysis

  • max time kernel
    91s
  • max time network
    94s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    05/01/2025, 11:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    out.exe

  • Size

    653KB

  • MD5

    6970ea0b6597dcd5b4f5f19f28e958a8

  • SHA1

    a0130bb7ac03ec4799c90781ca93fd1392c6d54c

  • SHA256

    481e03978ca339ce697252895efe89b09fefd3098ad247d24eeb6cca9969f553

  • SHA512

    bc95cbe9a050e3d3b713745ef399bf2817d38f8e019f6edffdd2bf755badbde766e434e39a7f32356125bba0692b694c18da8dd0762aac0c9430d45acb215e01

  • SSDEEP

    12288:nkxDoouVA2nxKkhEvdRgQriDJOIlW+yBGQowlNCWS:RRmJkioQrilOIc+yMx

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\out.exe
    "C:\Users\Admin\AppData\Local\Temp\out.exe"
    1⤵
      PID:1072
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1072 -s 8
        2⤵
        • Program crash
        PID:3336
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1072 -ip 1072
      1⤵
        PID:3932

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads