Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 05:37
Static task
static1
Behavioral task
behavioral1
Sample
9650dce002e08194ba9f2b833f4d5e21ae6cf187e5b1dd3b73853b918dc0a964.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9650dce002e08194ba9f2b833f4d5e21ae6cf187e5b1dd3b73853b918dc0a964.exe
Resource
win10v2004-20220812-en
General
-
Target
9650dce002e08194ba9f2b833f4d5e21ae6cf187e5b1dd3b73853b918dc0a964.exe
-
Size
116KB
-
MD5
6fe4bedd599565ce98d7cceb4fdc20a0
-
SHA1
68f279274d901b0fcdc10f7570dff53fc95168c2
-
SHA256
9650dce002e08194ba9f2b833f4d5e21ae6cf187e5b1dd3b73853b918dc0a964
-
SHA512
1b735d3aedc13edb3211562aba4d3ef335edd14769e45fdd2c0c47a27f1b5101afc1f2ff140ec5d6f515a95c57a33bc8ffc99ead1e4494e26c8145f057e2c801
-
SSDEEP
3072:kQYrUjG2ydqaYNIlnZSDADeak7dJHB/AdG9:KojG2tqSsQLH5Ady
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4996 4784 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\9650dce002e08194ba9f2b833f4d5e21ae6cf187e5b1dd3b73853b918dc0a964.exe"C:\Users\Admin\AppData\Local\Temp\9650dce002e08194ba9f2b833f4d5e21ae6cf187e5b1dd3b73853b918dc0a964.exe"1⤵PID:4784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4784 -s 2482⤵
- Program crash
PID:4996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4784 -ip 47841⤵PID:4792