Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
107s -
max time network
3s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 20:36
Static task
static1
Behavioral task
behavioral1
Sample
a8668e79a49f3876c4ab827851b393222922aa43978c99aaaafdb20bdb4c6a4b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8668e79a49f3876c4ab827851b393222922aa43978c99aaaafdb20bdb4c6a4b.exe
Resource
win10v2004-20220812-en
General
-
Target
a8668e79a49f3876c4ab827851b393222922aa43978c99aaaafdb20bdb4c6a4b.exe
-
Size
179KB
-
MD5
0007fa8e792d1e7a73620f7bbc40f9a0
-
SHA1
3f81d00bd18efe85b643a16652998ffa4ef27ef6
-
SHA256
a8668e79a49f3876c4ab827851b393222922aa43978c99aaaafdb20bdb4c6a4b
-
SHA512
272f2f41f205e9764ff0843324a26900daef4ceda95622d131e649009a2ab736266c391a781b27fa736d39f8ba2c3ec627e1cb95bf6d6051eb8e0c813111ac5b
-
SSDEEP
3072:1xyKT4pQBPlWjR3HNZFDxN5Eq4BSDADeak7dJHB/AdG6:zT6Qlo5tSqQSsQLH5AdT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1780 2440 WerFault.exe 17
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8668e79a49f3876c4ab827851b393222922aa43978c99aaaafdb20bdb4c6a4b.exe"C:\Users\Admin\AppData\Local\Temp\a8668e79a49f3876c4ab827851b393222922aa43978c99aaaafdb20bdb4c6a4b.exe"1⤵PID:2440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2440 -s 3042⤵
- Program crash
PID:1780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2440 -ip 24401⤵PID:736