Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
164s -
max time network
3s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 01:55
Static task
static1
Behavioral task
behavioral1
Sample
f38390bf0c34b44ce6fc857294a1dc5010c77eb8e746ae5a3204916c54258861.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f38390bf0c34b44ce6fc857294a1dc5010c77eb8e746ae5a3204916c54258861.exe
Resource
win10v2004-20220812-en
General
-
Target
f38390bf0c34b44ce6fc857294a1dc5010c77eb8e746ae5a3204916c54258861.exe
-
Size
333KB
-
MD5
7f56018a42c0af21498df939b8689f73
-
SHA1
5e1043f9afa58630559c83bc6d6fac5c0c39f53c
-
SHA256
f38390bf0c34b44ce6fc857294a1dc5010c77eb8e746ae5a3204916c54258861
-
SHA512
7f7a5e60401c8bbb61da8820d5608ef02eb4ab8cee3b0de3ba222b3353c32702835ebe90f138433a3e0afd251e246d0a2c674a79e2fd823f3485fee7bf3c5545
-
SSDEEP
6144:ZXYJRKf7rGjyHKuNoMs58tnGSDU4afkWyeU3W/+NLjJoxGq6IElz:ZXYufHGjyHKuaMs58tnGSnZmmhFYGq6T
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3632 4656 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\f38390bf0c34b44ce6fc857294a1dc5010c77eb8e746ae5a3204916c54258861.exe"C:\Users\Admin\AppData\Local\Temp\f38390bf0c34b44ce6fc857294a1dc5010c77eb8e746ae5a3204916c54258861.exe"1⤵PID:4656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 2882⤵
- Program crash
PID:3632
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4656 -ip 46561⤵PID:2160