Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 17:45
Static task
static1
Behavioral task
behavioral1
Sample
bfefbb62bcbe74b8138287fb96009be4bc14628a49b7f96399cef4527e476998.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bfefbb62bcbe74b8138287fb96009be4bc14628a49b7f96399cef4527e476998.exe
Resource
win10v2004-20220901-en
General
-
Target
bfefbb62bcbe74b8138287fb96009be4bc14628a49b7f96399cef4527e476998.exe
-
Size
823KB
-
MD5
7bccad3968e90c76cf3fac8fb4279cdd
-
SHA1
8e174fc8fe67e11aea2887e341a358b6638f3359
-
SHA256
bfefbb62bcbe74b8138287fb96009be4bc14628a49b7f96399cef4527e476998
-
SHA512
67f4947da6e659c0e4e069694d3af6eaf998817f013a5f6a6435977e03c91376f841dbd0326bcad5ad1b52452e91419ed9eb3140330b638c2444d3f04878bae0
-
SSDEEP
12288:H7+nJExq/Ofeux7I/RRvcm+TAF+vEfplPCXdtTDUJ+qYpY8dywP6UkXOpLYyPdmX:HipGfeuZI/MdAA5bPUQS8b6U4ALYy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 612 1484 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\bfefbb62bcbe74b8138287fb96009be4bc14628a49b7f96399cef4527e476998.exe"C:\Users\Admin\AppData\Local\Temp\bfefbb62bcbe74b8138287fb96009be4bc14628a49b7f96399cef4527e476998.exe"1⤵PID:1484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 2842⤵
- Program crash
PID:612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1484 -ip 14841⤵PID:4620