Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
75s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20/10/2022, 20:18
Static task
static1
Behavioral task
behavioral1
Sample
4fc3b7a1489c7b65c17a90e3a516b437ae417d513b08879803140a91f1a06cc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4fc3b7a1489c7b65c17a90e3a516b437ae417d513b08879803140a91f1a06cc0.exe
Resource
win10v2004-20220812-en
General
-
Target
4fc3b7a1489c7b65c17a90e3a516b437ae417d513b08879803140a91f1a06cc0.exe
-
Size
27KB
-
MD5
969cf56ba5d9f9f7658a28f3d76af380
-
SHA1
7a2932d9d25d98b82b508de6d571a591be30c1f5
-
SHA256
4fc3b7a1489c7b65c17a90e3a516b437ae417d513b08879803140a91f1a06cc0
-
SHA512
6f6865a4be78964676d2632b0b822381aa9c2bf7a3c3ef58e5343df86570b2637c798a8c57ad60daa10ba025d9d96815a2d5cb06890900df3fccc2db1bc611cc
-
SSDEEP
384:lijuGXOsa32vAmJDmX93THDezUt099d9SoHeZrF1EoU6t518gpmvDUlLg:lijuGboSDy9Lt0L8ZrFq81bp5lL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4580 4796 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fc3b7a1489c7b65c17a90e3a516b437ae417d513b08879803140a91f1a06cc0.exe"C:\Users\Admin\AppData\Local\Temp\4fc3b7a1489c7b65c17a90e3a516b437ae417d513b08879803140a91f1a06cc0.exe"1⤵PID:4796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4796 -s 3842⤵
- Program crash
PID:4580
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4796 -ip 47961⤵PID:1456