Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2022, 00:35
Behavioral task
behavioral1
Sample
298402eb5853a23f3b0a891480673f3addf2f413ee7b0893df65f41a67430cea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
298402eb5853a23f3b0a891480673f3addf2f413ee7b0893df65f41a67430cea.exe
Resource
win10v2004-20220901-en
General
-
Target
298402eb5853a23f3b0a891480673f3addf2f413ee7b0893df65f41a67430cea.exe
-
Size
140KB
-
MD5
5a67e1f0e2fbc569e7d3130d4bee4739
-
SHA1
6774249413a2db728c0f2f0b30c08591d7b655bd
-
SHA256
298402eb5853a23f3b0a891480673f3addf2f413ee7b0893df65f41a67430cea
-
SHA512
f0b1312a71686e0df903b63fdf37d087ef1bbbee8a26d7666edbc6f9a965ef4ebcdbfaeaf3545673cf088bf50bd2d362234c15ff5f501f87ce8c468d0d74da73
-
SSDEEP
3072:ZiKgrxmxrk3f3RjzF4Ro6WUTFaY6dje0dEz6mp7vrWPQZlzd7XCtSiL2DfZWIVDv:ZiKgrxmxY3f3bWpWs4Y6k0dEzLTrWPQf
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4844-132-0x0000000001000000-0x000000000104C000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 1036 4844 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\298402eb5853a23f3b0a891480673f3addf2f413ee7b0893df65f41a67430cea.exe"C:\Users\Admin\AppData\Local\Temp\298402eb5853a23f3b0a891480673f3addf2f413ee7b0893df65f41a67430cea.exe"1⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 2882⤵
- Program crash
PID:1036
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4844 -ip 48441⤵PID:2044