Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
208s -
max time network
327s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16/10/2022, 11:14
Static task
static1
Behavioral task
behavioral1
Sample
04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe
Resource
win10v2004-20220812-en
General
-
Target
04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe
-
Size
3.8MB
-
MD5
5df97fbccd6a3c0964beed957a83b04b
-
SHA1
fc09080750bcbe04177f4e386e62a34b91cabc68
-
SHA256
04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2
-
SHA512
dd1de4e22c41cca33acd9b297cef37d83f60e7fbbb1e344c4ea945d09472ea13bbfcc9f979cf1af6e814c7c52b298952c12b78246d0fce11be56286aea9cff90
-
SSDEEP
49152:C2NoakGdjkMAjntrw7vCGfd+y8zaB8d6xlbXTsKbObmsZjyHvapbhB:nNoa7ZCG1T8mT3a6v+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1736 1660 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe"C:\Users\Admin\AppData\Local\Temp\04ec1f31f6b3c16f8be0e3761651bfde6f109a4d862cc8e88a1d4cac4c5827a2.exe"1⤵PID:1660
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1660 -s 8922⤵
- Program crash
PID:1736
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1660 -ip 16601⤵PID:1556