Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
130s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 19:02 UTC
Static task
static1
Behavioral task
behavioral1
Sample
8833fbb9775c499d2beeb3368554bef614dd4c85c97b9828281648771e8bea31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8833fbb9775c499d2beeb3368554bef614dd4c85c97b9828281648771e8bea31.exe
Resource
win10v2004-20220812-en
General
-
Target
8833fbb9775c499d2beeb3368554bef614dd4c85c97b9828281648771e8bea31.exe
-
Size
196KB
-
MD5
0032b775da4c6d09a844d572358aac10
-
SHA1
509b7f65ce960f8419ecb896934c7ccc6d1139c4
-
SHA256
8833fbb9775c499d2beeb3368554bef614dd4c85c97b9828281648771e8bea31
-
SHA512
e1b48674241f555e08e84f36a13a9b071b581faf245dc99b6f3a38eb749ddf03784a757e3c0cde2a39e56cbb296d8507d05f5f400c62460e7e42ade684b6ed14
-
SSDEEP
6144:btaZQRfeoW7JBxk7QlCkukItPgbMl3/Iho:RwQE756ksPgsvI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4176 3408 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\8833fbb9775c499d2beeb3368554bef614dd4c85c97b9828281648771e8bea31.exe"C:\Users\Admin\AppData\Local\Temp\8833fbb9775c499d2beeb3368554bef614dd4c85c97b9828281648771e8bea31.exe"1⤵PID:3408
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 5082⤵
- Program crash
PID:4176
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3408 -ip 34081⤵PID:1176
Network
-
Remote address:8.8.8.8:53Request176.122.125.40.in-addr.arpaIN PTRResponse
-
260 B 5
-
322 B 7
-
322 B 7
-
46 B 40 B 1 1
-
322 B 7
-
322 B 7
-
322 B 7