Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2022, 09:06
Static task
static1
Behavioral task
behavioral1
Sample
02410b504e11ffaf78db0020ab1ab9b76822fd88ab41e8748200e2f046ccff75.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
02410b504e11ffaf78db0020ab1ab9b76822fd88ab41e8748200e2f046ccff75.exe
Resource
win10v2004-20220901-en
General
-
Target
02410b504e11ffaf78db0020ab1ab9b76822fd88ab41e8748200e2f046ccff75.exe
-
Size
153KB
-
MD5
6629d22d3c53d12b3bbd684c18a04079
-
SHA1
8f33eda1ca6ee9c4c6685cfad59c223722036fa9
-
SHA256
02410b504e11ffaf78db0020ab1ab9b76822fd88ab41e8748200e2f046ccff75
-
SHA512
6eab7aa33581471aa5e649a343b5f9dc8bfe7870710bb6b4a2870280099403f33c1c26bfe3545c6217724ef2464ee7969c8ac02fc48e8f3790d3c5422d0d2660
-
SSDEEP
3072:wy+SuYUBMxvxjvcKttlkWV5rlJZmPyQlCTUi184:Z+SuYFxtWWjMl6B13
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4588 4896 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\02410b504e11ffaf78db0020ab1ab9b76822fd88ab41e8748200e2f046ccff75.exe"C:\Users\Admin\AppData\Local\Temp\02410b504e11ffaf78db0020ab1ab9b76822fd88ab41e8748200e2f046ccff75.exe"1⤵PID:4896
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4896 -s 3482⤵
- Program crash
PID:4588
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4896 -ip 48961⤵PID:2396