Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 22:58
Static task
static1
Behavioral task
behavioral1
Sample
73fd9cefc1dd9b77219de607a34ee5536a576c9e27a03fe9426c81c0719ae796.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73fd9cefc1dd9b77219de607a34ee5536a576c9e27a03fe9426c81c0719ae796.exe
Resource
win10v2004-20220812-en
General
-
Target
73fd9cefc1dd9b77219de607a34ee5536a576c9e27a03fe9426c81c0719ae796.exe
-
Size
312KB
-
MD5
a1a5715a097a868c4a86c1697fd24540
-
SHA1
17758b5d6c11f5f23e42779459fd0f557a24a11f
-
SHA256
73fd9cefc1dd9b77219de607a34ee5536a576c9e27a03fe9426c81c0719ae796
-
SHA512
8052f6dc27b95857eb984f663486bbf9d2ac4fecb4ff8871e9a806105a59bafb806e61249b11ce34b6c57c06b9af6e5b5b00e764cd9a390b49a6cd6a745b78da
-
SSDEEP
6144:8QVxJsdo4FsOi/Cg87W/Wm/0JsMDcPT+5WGFJaZOFpEZMmQ8y:82nEGH/MW/Wm7MDgTuaZxZMma
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5032 5068 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\73fd9cefc1dd9b77219de607a34ee5536a576c9e27a03fe9426c81c0719ae796.exe"C:\Users\Admin\AppData\Local\Temp\73fd9cefc1dd9b77219de607a34ee5536a576c9e27a03fe9426c81c0719ae796.exe"1⤵PID:5068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5068 -s 4282⤵
- Program crash
PID:5032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5068 -ip 50681⤵PID:4968