Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
98s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 12:30
Static task
static1
Behavioral task
behavioral1
Sample
4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe
Resource
win10v2004-20220812-en
General
-
Target
4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe
-
Size
573KB
-
MD5
91071af657e8f3ff71e5171e96d1b2e0
-
SHA1
e9ccab81aaa323a6d53ea62f252aeb28745374b1
-
SHA256
4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f
-
SHA512
234a3a4227f808112a5f1a571c719e157987883afe657622ce0942661d70c7762fb9e302cf39aede322d8a7985c6b02a92040b5e10812f7b50b72501583b0191
-
SSDEEP
6144:7tMcZQNxogdOmTq2tfBTgBcJhbn5s0bgGqvfNa6soxqw6U4k6+8rNp6t2:2hds2t5sBan5skgGsNns8fKrNp6E
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1368 5044 WerFault.exe 80 4380 5044 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe"C:\Users\Admin\AppData\Local\Temp\4aafdf00c039442993b3f62da1bb692ecfef219e73c05e0613f8f7c2d5b47e5f.exe"1⤵PID:5044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 7162⤵
- Program crash
PID:1368
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 7602⤵
- Program crash
PID:4380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5044 -ip 50441⤵PID:4892
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 5044 -ip 50441⤵PID:1760