Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
156s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 00:57
Static task
static1
Behavioral task
behavioral1
Sample
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe
Resource
win10v2004-20220812-en
General
-
Target
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe
-
Size
132KB
-
MD5
6fcfa238c22b762164f54bb9f6f22780
-
SHA1
bdd4e8b8abe41e5f0f2550636a4854da49a3fc7b
-
SHA256
96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844
-
SHA512
6425438f7aacb9668d9ac11b89984a8c48ff038f7e91028ba69839a9a98ccaa0586fc7a2babe49c8f9facf944f50d984f29c60973a06319d77740c5269817636
-
SSDEEP
3072:gBWZgOFGPLCAvn6elVApl38m/WWmeFS1/vw:/DQ44VOlsm/WMS1A
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4820 1596 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe"C:\Users\Admin\AppData\Local\Temp\96bb80b4222de01ae55177be9970289f47b6b0a06816babdb2c46617cc1f6844.exe"1⤵PID:1596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1596 -s 4082⤵
- Program crash
PID:4820
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1596 -ip 15961⤵PID:4900