Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
88s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 14:40
Static task
static1
Behavioral task
behavioral1
Sample
32ee8d87c7983c2c8dde9d73b4dc8c8bdd0636fdf8e7d9432994bb7479ab20f2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
32ee8d87c7983c2c8dde9d73b4dc8c8bdd0636fdf8e7d9432994bb7479ab20f2.exe
Resource
win10v2004-20220901-en
General
-
Target
32ee8d87c7983c2c8dde9d73b4dc8c8bdd0636fdf8e7d9432994bb7479ab20f2.exe
-
Size
31KB
-
MD5
1d1f570f8864f03e9b204123262fc88f
-
SHA1
0474413b0c075c6c36c5def91234d13b8c4167d2
-
SHA256
32ee8d87c7983c2c8dde9d73b4dc8c8bdd0636fdf8e7d9432994bb7479ab20f2
-
SHA512
dfa3e266822115fc324f2e0750199f8516cf9d8a43a45c2f582ca54ad0dd3c21f58cb8b3516aee189703d506854eb9b521c1371eaf32f60d91cbcc7a90078b86
-
SSDEEP
768:oIqeh0FpzQkr4CdjQ1N3LhGjD2/HH0Fiex:oz3FpzR6rbhGaH+F
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5060 1324 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\32ee8d87c7983c2c8dde9d73b4dc8c8bdd0636fdf8e7d9432994bb7479ab20f2.exe"C:\Users\Admin\AppData\Local\Temp\32ee8d87c7983c2c8dde9d73b4dc8c8bdd0636fdf8e7d9432994bb7479ab20f2.exe"1⤵PID:1324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1324 -s 3042⤵
- Program crash
PID:5060
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1324 -ip 13241⤵PID:2416