Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
169s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 18:02
Static task
static1
Behavioral task
behavioral1
Sample
db372a724e12c8c6aef92517ce3b58d45069cf852526950e8de96ec8100d9a0f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db372a724e12c8c6aef92517ce3b58d45069cf852526950e8de96ec8100d9a0f.exe
Resource
win10v2004-20220812-en
General
-
Target
db372a724e12c8c6aef92517ce3b58d45069cf852526950e8de96ec8100d9a0f.exe
-
Size
178KB
-
MD5
07044f71741a5e01d87b574a7c8c8a31
-
SHA1
0c46672ffbef09e67c1b70217e5381108f84cbfa
-
SHA256
db372a724e12c8c6aef92517ce3b58d45069cf852526950e8de96ec8100d9a0f
-
SHA512
74fe17091bc5c0b89136525c04a83e52a0aa0eeec1bd25507245ef41ce1374a81a20dbdc29cd87555b4262d34f3443568c615c890603dbb1e8ee64d2a34a5244
-
SSDEEP
3072:OGK/CuMCiAn3WOPmlX/krfy57bYYpbvC2NlcE2nktdcX00aKe:W/KCZn8RkWJbjJ65ktdAS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4976 1624 WerFault.exe 22
Processes
-
C:\Users\Admin\AppData\Local\Temp\db372a724e12c8c6aef92517ce3b58d45069cf852526950e8de96ec8100d9a0f.exe"C:\Users\Admin\AppData\Local\Temp\db372a724e12c8c6aef92517ce3b58d45069cf852526950e8de96ec8100d9a0f.exe"1⤵PID:1624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1624 -s 2842⤵
- Program crash
PID:4976
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1624 -ip 16241⤵PID:4908