Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
22s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 01:45
Static task
static1
Behavioral task
behavioral1
Sample
6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1.exe
Resource
win10v2004-20220812-en
General
-
Target
6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1.exe
-
Size
9KB
-
MD5
0c303ccc4d87225f1e1a75dc31feaa7c
-
SHA1
2b6efa459808f7682637c46d9581d44d372b0e30
-
SHA256
6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1
-
SHA512
55c5d644d9777965e8830c7e3ad62d53fe12881d992bab31d5f6d9b57d8e330ad1abdd47d25a0e1c5fc1228fc3b7c8ec7f62dd8718bbfb6365b9fa6f69c54737
-
SSDEEP
192:ixJMD66kiiaNvIzGIeh+ziv4eK/tRJa6rwBSKLs:4MgibIaIRzTb/fk6zN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3816 2532 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1.exe"C:\Users\Admin\AppData\Local\Temp\6b61551ae9307b2ce05b2100ecf1c025865250f1b2d2b5a983b210dd9c0d43b1.exe"1⤵PID:2532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 2242⤵
- Program crash
PID:3816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2532 -ip 25321⤵PID:1600