Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 15:08
Static task
static1
Behavioral task
behavioral1
Sample
75bda2ee24760aba92e40418c013898a5aa7c46670521019d26e4218cff3b14a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75bda2ee24760aba92e40418c013898a5aa7c46670521019d26e4218cff3b14a.exe
Resource
win10v2004-20220812-en
General
-
Target
75bda2ee24760aba92e40418c013898a5aa7c46670521019d26e4218cff3b14a.exe
-
Size
324KB
-
MD5
63095ce4ca9559d5d692c2a3c6138fc0
-
SHA1
c8c77d1836d1493e384af096247b745d1bb73002
-
SHA256
75bda2ee24760aba92e40418c013898a5aa7c46670521019d26e4218cff3b14a
-
SHA512
2866a0fa9379f1b4c60a3e0425b514df690316f2a49370cd3c46cfbe947b977a7fda2cffddd542714071b992153a578e6a9bccff645c744414bfd9c33a373507
-
SSDEEP
6144:moZ3E+N7uxgRCvfKaXrBMFr7h5Nlmjc/8ipCu:1oxUCvfKGe1Ac/Q
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2192 4948 WerFault.exe 81 1368 4948 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\75bda2ee24760aba92e40418c013898a5aa7c46670521019d26e4218cff3b14a.exe"C:\Users\Admin\AppData\Local\Temp\75bda2ee24760aba92e40418c013898a5aa7c46670521019d26e4218cff3b14a.exe"1⤵PID:4948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 2562⤵
- Program crash
PID:2192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 2682⤵
- Program crash
PID:1368
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4948 -ip 49481⤵PID:4940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 4948 -ip 49481⤵PID:1804