Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
192s -
max time network
222s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 21:14
Static task
static1
Behavioral task
behavioral1
Sample
53746b9a411d017a7faa9e4c737d55c18197307c8dd993bfada3caa396e05f13.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
53746b9a411d017a7faa9e4c737d55c18197307c8dd993bfada3caa396e05f13.exe
Resource
win10v2004-20220812-en
General
-
Target
53746b9a411d017a7faa9e4c737d55c18197307c8dd993bfada3caa396e05f13.exe
-
Size
152KB
-
MD5
a2501bea0fa2d07f140ce9611d73e2c0
-
SHA1
6671d8abf633e44a33fb36f1c1f21888133d4a87
-
SHA256
53746b9a411d017a7faa9e4c737d55c18197307c8dd993bfada3caa396e05f13
-
SHA512
5a2cc148ef85e6ed37021f5d8fc7427881eec442719722df7daa4ce10b439373896e0c9c61204f77fc7d0632d60df038becf14353968e796c1c313e6fcc5d848
-
SSDEEP
1536:RMQKzwcnBIX+k7u7ruIWiktMU1NzdoAqLUY3lafisKld5qjJQMwXeBIunB:KDzwcnG7u7rVWikKU1pts12aMZ5B
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1416 4800 WerFault.exe 79 2280 4800 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\53746b9a411d017a7faa9e4c737d55c18197307c8dd993bfada3caa396e05f13.exe"C:\Users\Admin\AppData\Local\Temp\53746b9a411d017a7faa9e4c737d55c18197307c8dd993bfada3caa396e05f13.exe"1⤵PID:4800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 4722⤵
- Program crash
PID:1416
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 4922⤵
- Program crash
PID:2280
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4800 -ip 48001⤵PID:4128
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 4800 -ip 48001⤵PID:4616