Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
114s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 15:16
Static task
static1
Behavioral task
behavioral1
Sample
ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4.exe
Resource
win10v2004-20220812-en
General
-
Target
ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4.exe
-
Size
65KB
-
MD5
a08583ab538dd735ec9155552c073a40
-
SHA1
e101719c61425550118d555ab17ce3e3b9afcb7b
-
SHA256
ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4
-
SHA512
2f7824d8eb7aa14a8c47b5a85762b2d6c07542a70a1d369731b0762dfca973f95a7ccebacb62df4b40421d4766e978f5204e6004d2f96d5f177666491157c801
-
SSDEEP
768:A+J/HEdRbAY0iUNvVvdt5VeebD+Tq/QwIt0L06WRR373nMle29+I4U+Ooc4eC:A+eSnrTIs+Tq/Qw106S73nMlfPNU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3536 3980 WerFault.exe 78 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3980 ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4.exe"C:\Users\Admin\AppData\Local\Temp\ff035452ad84439358c6c13d89193dc22270b30f295b4d9a517102333cc3ddb4.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3980 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3980 -s 6842⤵
- Program crash
PID:3536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3980 -ip 39801⤵PID:3104