Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
112s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 19:51 UTC
Static task
static1
Behavioral task
behavioral1
Sample
b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe
Resource
win10v2004-20220812-en
General
-
Target
b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe
-
Size
160KB
-
MD5
a36795ac55f20ed0ffde8d98692aef20
-
SHA1
8b53d97a65fbf77c72e8777267ca8a792092c28e
-
SHA256
b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0
-
SHA512
4b4a2762e7d3d9ae5c152b6fa588716fa6f4eb29f965b2e7188c241b3110d75c055b6072adf824eddb919deb16e35b5d9171a2070f561ac6c568725681779480
-
SSDEEP
3072:TvJU8qJKCjW6slXu4kCPsSi9IWukjhGgfFxVnr97Ipm:Tv63Q+4kvIWuk9GgfFxVnJsw
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4936 4308 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe"C:\Users\Admin\AppData\Local\Temp\b64988d82626a9832a605545f6d529a7422503243c18f8e49f3a91b4cc1ddac0.exe"1⤵PID:4308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4308 -s 2802⤵
- Program crash
PID:4936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4308 -ip 43081⤵PID:4948
Network
-
Remote address:8.8.8.8:53Request226.101.242.52.in-addr.arpaIN PTRResponse
-
104 B 2
-
322 B 7
-
322 B 7
-
322 B 7