Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2022, 17:23
Static task
static1
Behavioral task
behavioral1
Sample
350d9f8537ea5a92eb2435e64114504c0d077f689a4364578ba3973b43159994.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
350d9f8537ea5a92eb2435e64114504c0d077f689a4364578ba3973b43159994.exe
Resource
win10v2004-20220812-en
General
-
Target
350d9f8537ea5a92eb2435e64114504c0d077f689a4364578ba3973b43159994.exe
-
Size
24KB
-
MD5
77956af4918742aaea93aeed8ff52538
-
SHA1
4b045f9ec66d050271fdb231ad8ef4785daf0bfc
-
SHA256
350d9f8537ea5a92eb2435e64114504c0d077f689a4364578ba3973b43159994
-
SHA512
63185871cc501ac68c2b85b14dc092f68064571199b907d05133f1ab17b63d66ad9f637c8794581827e33e7d4d5c7e003da98b79c9537d47f9aa27bfc888c01e
-
SSDEEP
384:QZfFak78ietIm35otzIQW29LgzePBxwRX++VqK6/6O1/ZuaPKOARS/bCPC:QZUk7uY82gaJaw+VqK6/6O1huaPKVSTj
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1296 2492 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\350d9f8537ea5a92eb2435e64114504c0d077f689a4364578ba3973b43159994.exe"C:\Users\Admin\AppData\Local\Temp\350d9f8537ea5a92eb2435e64114504c0d077f689a4364578ba3973b43159994.exe"1⤵PID:2492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2492 -s 2282⤵
- Program crash
PID:1296
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2492 -ip 24921⤵PID:1932