Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 06:16
Static task
static1
Behavioral task
behavioral1
Sample
37ce3eaf76d0bcf75b7b4b31677e4f9494d8e12deb7020c1c8d51b1a6269659d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37ce3eaf76d0bcf75b7b4b31677e4f9494d8e12deb7020c1c8d51b1a6269659d.exe
Resource
win10v2004-20220812-en
General
-
Target
37ce3eaf76d0bcf75b7b4b31677e4f9494d8e12deb7020c1c8d51b1a6269659d.exe
-
Size
72KB
-
MD5
64e7bf87e6c7e12b59b894191065d437
-
SHA1
6f13dd6b93316a690ce6db1ebaa555f4f098dc08
-
SHA256
37ce3eaf76d0bcf75b7b4b31677e4f9494d8e12deb7020c1c8d51b1a6269659d
-
SHA512
a198b12f85601bc54ad24f36eb1eaea7768369341d76acff587b97fc6a1742fa4538c91ad8a584e4c023cddc69b3cf351b60b6682af999873fe8fa4e1d345ae4
-
SSDEEP
1536:aPi1916wvNe7OK2FpYMkfG10ug6cGqXpPLQXZNVbD:aG16wWOXFbcGnXZNVv
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4792 4404 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\37ce3eaf76d0bcf75b7b4b31677e4f9494d8e12deb7020c1c8d51b1a6269659d.exe"C:\Users\Admin\AppData\Local\Temp\37ce3eaf76d0bcf75b7b4b31677e4f9494d8e12deb7020c1c8d51b1a6269659d.exe"1⤵PID:4404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4404 -s 3002⤵
- Program crash
PID:4792
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4404 -ip 44041⤵PID:4844