Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 04:07
Static task
static1
Behavioral task
behavioral1
Sample
63ef9c2c9097aefc776f86ebfa6848f11128c18823e994a8d21ba4d3a89ea234.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63ef9c2c9097aefc776f86ebfa6848f11128c18823e994a8d21ba4d3a89ea234.exe
Resource
win10v2004-20220812-en
General
-
Target
63ef9c2c9097aefc776f86ebfa6848f11128c18823e994a8d21ba4d3a89ea234.exe
-
Size
26KB
-
MD5
571a4e8d214ef920019670d3f48f2f9d
-
SHA1
29e63d8ca4e96516956d9bebe859f9d8c6707b93
-
SHA256
63ef9c2c9097aefc776f86ebfa6848f11128c18823e994a8d21ba4d3a89ea234
-
SHA512
8306e9501499fd7e54addfae67720ba2fdbf0b94835c58e5502a471b44b2ee3328e0a2febb6532dc5044fe5a8aeb7b34ed949aad1795ad3cfd81c68a436fac6d
-
SSDEEP
384:P4k9y3b2v8G6aiNBo6irP0RpwW68bsWUufP6pPBDqDsoy66T70lG0Ot1NG8:PGA8G2g4ZblfP6p5DqDsFu5O08
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4008 4492 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\63ef9c2c9097aefc776f86ebfa6848f11128c18823e994a8d21ba4d3a89ea234.exe"C:\Users\Admin\AppData\Local\Temp\63ef9c2c9097aefc776f86ebfa6848f11128c18823e994a8d21ba4d3a89ea234.exe"1⤵PID:4492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4492 -s 3242⤵
- Program crash
PID:4008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4492 -ip 44921⤵PID:3596