Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
173s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 22:13
Behavioral task
behavioral1
Sample
e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe
Resource
win10v2004-20220812-en
General
-
Target
e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe
-
Size
154KB
-
MD5
90e34a3ba9a4ca2892884302ee1000a0
-
SHA1
22c7c7542b108310735e16dfe8df762547b34fcf
-
SHA256
e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676
-
SHA512
2a36131fc91ae8cd27890d6b84e3c39666bf0175267888db9aced969dd311acdea5c4ff9496429b61692820b010d767dac1a61c8c831bd7bcb78df37ff23ce6d
-
SSDEEP
3072:I0ViWhz161qE7dVeEuyXXu/MI0X42SDyRG/orReN:rMPxbCBG42dRG/T
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/720-133-0x0000000000400000-0x000000000046D000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 4808 720 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe"C:\Users\Admin\AppData\Local\Temp\e4e83065009db497d6af2db587a4629f022f745e814c6b28010c974045837676.exe"1⤵PID:720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 720 -s 4282⤵
- Program crash
PID:4808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 720 -ip 7201⤵PID:620