Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 20:08
Static task
static1
Behavioral task
behavioral1
Sample
fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29.exe
Resource
win10v2004-20220812-en
General
-
Target
fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29.exe
-
Size
223KB
-
MD5
82415e5164f2472b41c7c1c649e9205d
-
SHA1
b3e62f3dff0115a580e78602783a5b896e7f70c3
-
SHA256
fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29
-
SHA512
7499f2d615f851176c7c9244289bdb3314f3a3ef86980ca25571ddce67d89660c53d1c08435e16470117ebf620a689280c82c0341896f9110cdaca2de09f398e
-
SSDEEP
1536:ZIUKX8quuRWNp199xW96ZCVh8s4aBQFNpCeB+DI3GQkVLNSLUUkh1hC7u6WT5l9u:ZpqoNpGVh89Cg0RdXtK9r4U8zWtEW9
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5044 564 WerFault.exe 69 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 564 fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29.exe"C:\Users\Admin\AppData\Local\Temp\fb557bcc93562d5b68bde6c5577954b4df4597c4b078d99acbae396b60717f29.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:564 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 564 -s 4642⤵
- Program crash
PID:5044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 564 -ip 5641⤵PID:2264