Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
26/09/2022, 13:23
220926-qm7djsahd3 926/09/2022, 13:23
220926-qmv1hscagq 126/09/2022, 13:21
220926-ql5tbsahc8 125/09/2022, 11:08
220925-m8t4kaffem 3Analysis
-
max time kernel
69s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/09/2022, 11:08
Static task
static1
Behavioral task
behavioral1
Sample
StOMW0ci.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
StOMW0ci.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
StOMW0ci.dll
-
Size
2.5MB
-
MD5
30f0b4c68317a320227389dc671e32c2
-
SHA1
4cc428c3355504fbc7fa68ab44c4f8c43938adc1
-
SHA256
0213a0d183b593976c20511515be077f94595a3993bfc496e9c4783a506c147e
-
SHA512
9f8f9651189a84f9177d2ac14bb73f563f549127e5b5700892127911f93edfb5f80a40469eefa37d0baa2073c47c9b5d01d47cee831fa704ac77d1972bedf746
-
SSDEEP
49152:/UV3vnVxDtgL47ZbH8TGN8DC9Vj7iRJrd1skW3/gsykrC+PhqJlT89i3FCQuweF7:SVNtSYZbH8TGNYC9Vj7iRJrbskg/gsya
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2688 3192 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\StOMW0ci.dll,#11⤵PID:3192
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3192 -s 3282⤵
- Program crash
PID:2688
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 188 -p 3192 -ip 31921⤵PID:968