Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
100s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2022, 10:48
Static task
static1
Behavioral task
behavioral1
Sample
e9731aeafa55ad3bdcd86f122d113dbd5aa079d69c48c62902df73ef9f4cb998.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9731aeafa55ad3bdcd86f122d113dbd5aa079d69c48c62902df73ef9f4cb998.exe
Resource
win10v2004-20220812-en
General
-
Target
e9731aeafa55ad3bdcd86f122d113dbd5aa079d69c48c62902df73ef9f4cb998.exe
-
Size
27KB
-
MD5
0901980a3d9b1baa5e094953847fef60
-
SHA1
199b1d1ed84ac6a11960b7840ecba212780b1e5d
-
SHA256
e9731aeafa55ad3bdcd86f122d113dbd5aa079d69c48c62902df73ef9f4cb998
-
SHA512
93d3fb3f489910dc86549d1d8e590f5eafe220f446ea780a1604de87118e9d21745f109541ccac67e8fd8756b8cdd53eb08d87022042c32f3f3b2934cac2c1a1
-
SSDEEP
384:LttR1GnddQP2t2nxDKd85uu62W8mWOjW50w4Q9j2qvqQ33CV8elk80a:Bz0n4PVnUd8d6252JKt1e280a
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4212 1908 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9731aeafa55ad3bdcd86f122d113dbd5aa079d69c48c62902df73ef9f4cb998.exe"C:\Users\Admin\AppData\Local\Temp\e9731aeafa55ad3bdcd86f122d113dbd5aa079d69c48c62902df73ef9f4cb998.exe"1⤵PID:1908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1908 -s 3042⤵
- Program crash
PID:4212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 1908 -ip 19081⤵PID:2004