Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 22:41
Static task
static1
Behavioral task
behavioral1
Sample
51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe
Resource
win10v2004-20220901-en
General
-
Target
51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe
-
Size
54KB
-
MD5
a34db65b6334e40b6c0abbc65feb334a
-
SHA1
653b37e093a587eb02e8a37fc77204c5a15d3f39
-
SHA256
51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f
-
SHA512
7f0d8d47ee62ff4a8dcfadd429f7566e0ad1488cb2c092bd7e5044931f1080db942519f0ee33286a74e93479db4cb15857820bc770cbfcbb127f0a6e29d12e30
-
SSDEEP
1536:d9vD8aenGaV5KZb+OXmQ5wy1hSpc3vs9+WU:PvDgUb+O2Q5wMhwpj
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\iiern.exe 51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe File opened for modification C:\Windows\SysWOW64\iiern.exe 51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe -
Program crash 1 IoCs
pid pid_target Process procid_target 4708 4760 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe"C:\Users\Admin\AppData\Local\Temp\51fe0b4d75875bfb02c84c8e24db264b26c166c35af61582f0a5cfa7019df53f.exe"1⤵
- Drops file in System32 directory
PID:4760 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 7002⤵
- Program crash
PID:4708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4760 -ip 47601⤵PID:2420