Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 12:44
Static task
static1
Behavioral task
behavioral1
Sample
5ed4b7cf8baf4512984d667c22566e977eb4d65bd374a42de2752e60ce1584b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ed4b7cf8baf4512984d667c22566e977eb4d65bd374a42de2752e60ce1584b6.exe
Resource
win10v2004-20220901-en
General
-
Target
5ed4b7cf8baf4512984d667c22566e977eb4d65bd374a42de2752e60ce1584b6.exe
-
Size
25KB
-
MD5
d107eb9b5662ff2adcf3054447747776
-
SHA1
3b6e7f49376856d15dc25d119b0cf222d71051aa
-
SHA256
5ed4b7cf8baf4512984d667c22566e977eb4d65bd374a42de2752e60ce1584b6
-
SHA512
13cb19ad60f067620d369186341d4b7e6dc9afc13f1beb73364d18c776043e6ae468051c2b101daa125f0fa30d76249a40362a8aeb6ff6be20d116b42f078020
-
SSDEEP
768:A1ZTk7WupwsEZlFwnO3mNHFN/DKuPd7yil:A/AWPwOkeId7y
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2200 2616 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ed4b7cf8baf4512984d667c22566e977eb4d65bd374a42de2752e60ce1584b6.exe"C:\Users\Admin\AppData\Local\Temp\5ed4b7cf8baf4512984d667c22566e977eb4d65bd374a42de2752e60ce1584b6.exe"1⤵PID:2616
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2616 -s 2282⤵
- Program crash
PID:2200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2616 -ip 26161⤵PID:1636