Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
320s -
max time network
512s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26/10/2022, 23:42
Static task
static1
Behavioral task
behavioral1
Sample
e65315616ee6ac28ec9e8f0f43ddb0f189a81b515369a72fc8a6b69db280d829_dump_0x02390000.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e65315616ee6ac28ec9e8f0f43ddb0f189a81b515369a72fc8a6b69db280d829_dump_0x02390000.exe
Resource
win10v2004-20220812-en
General
-
Target
e65315616ee6ac28ec9e8f0f43ddb0f189a81b515369a72fc8a6b69db280d829_dump_0x02390000.exe
-
Size
292KB
-
MD5
43c917d7e73c01d02124d477d4007d9f
-
SHA1
ada8e3716a8803f92a4d2b0f103fe53cadf5e1c4
-
SHA256
11f75f1d8f35cc3bfcae3171e44262f34b6e95324a4ac3ab856ba1b46c5a7502
-
SHA512
dd77b3e98d64dcb38b473b6d2ae853f4cf729f438cb6544fe4899c776f44c9c77745d8806d76225657dbaf135fcd67827abac1037a2229e43eb7a80b1ecc4e69
-
SSDEEP
6144:FuK9TBKK7F5k88cce00nM9/yOgpfq4CWK4S/S83VSGVCBVku7tnp:FuK9ToKPP8HeNnM9/9g8HK58wGVCQWdp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1032 812 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e65315616ee6ac28ec9e8f0f43ddb0f189a81b515369a72fc8a6b69db280d829_dump_0x02390000.exe"C:\Users\Admin\AppData\Local\Temp\e65315616ee6ac28ec9e8f0f43ddb0f189a81b515369a72fc8a6b69db280d829_dump_0x02390000.exe"1⤵PID:812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 812 -s 1482⤵
- Program crash
PID:1032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 812 -ip 8121⤵PID:5084