Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 22:54
Static task
static1
Behavioral task
behavioral1
Sample
5610b45dae8f57dfe3c4d352e116574d956652bc902ff9f63e33630b9c4e622d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5610b45dae8f57dfe3c4d352e116574d956652bc902ff9f63e33630b9c4e622d.exe
Resource
win10v2004-20220901-en
General
-
Target
5610b45dae8f57dfe3c4d352e116574d956652bc902ff9f63e33630b9c4e622d.exe
-
Size
760KB
-
MD5
575fae8d3e36f5438b86df5f6ae33fb0
-
SHA1
b993b825b8e984d3306c839d917e3b760fb10467
-
SHA256
5610b45dae8f57dfe3c4d352e116574d956652bc902ff9f63e33630b9c4e622d
-
SHA512
b3557eda32aaeb4017b2742f39cb9093299aceac7c61d76c0ea2b7c3ae4ea3e942f8198d4d124ab0365f4e98720c416c2582c8425da9bb8d84f4f97d5d92ebe6
-
SSDEEP
12288:s9dGC5syS5syS5Z5Z5Z5Z5Z5syC+m+YyS5syS5syS5Z5Z5syS5sy/yS5H:BG2C922e2as
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1100 4788 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\5610b45dae8f57dfe3c4d352e116574d956652bc902ff9f63e33630b9c4e622d.exe"C:\Users\Admin\AppData\Local\Temp\5610b45dae8f57dfe3c4d352e116574d956652bc902ff9f63e33630b9c4e622d.exe"1⤵PID:4788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 3002⤵
- Program crash
PID:1100
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4788 -ip 47881⤵PID:928