Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
172s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 13:24
Static task
static1
Behavioral task
behavioral1
Sample
d6bcc81a738e2768cd88c28179680381be4cfa6fc0852b6f353cf5c6743a1695.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d6bcc81a738e2768cd88c28179680381be4cfa6fc0852b6f353cf5c6743a1695.exe
Resource
win10v2004-20220812-en
General
-
Target
d6bcc81a738e2768cd88c28179680381be4cfa6fc0852b6f353cf5c6743a1695.exe
-
Size
196KB
-
MD5
3de47749ed2a14d47d43f4ac06542527
-
SHA1
1f7ad75b87bd562cbeb2ffbe17b24d47bee34928
-
SHA256
d6bcc81a738e2768cd88c28179680381be4cfa6fc0852b6f353cf5c6743a1695
-
SHA512
16e14dc0294f649b32dd7efb301a75258c8dce926d755372b16a783f8264ca2590859bac96df1828fdb15000a9ad4c7bcc42ef9e87acdeec4132bd876c7fc264
-
SSDEEP
6144:rylOvGLj4V93xEzqUiQ3Ro+a6iGZpd5XI4:6Ovl9BOq5Q3RdaZGZ+4
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 212 4140 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6bcc81a738e2768cd88c28179680381be4cfa6fc0852b6f353cf5c6743a1695.exe"C:\Users\Admin\AppData\Local\Temp\d6bcc81a738e2768cd88c28179680381be4cfa6fc0852b6f353cf5c6743a1695.exe"1⤵PID:4140
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4140 -s 3162⤵
- Program crash
PID:212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4140 -ip 41401⤵PID:232