Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
61s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 21:06
Static task
static1
Behavioral task
behavioral1
Sample
ab11fd7bf7ec4ec5fcd74df6ae85147a5c656c01b984b80c849f140e410bc007.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab11fd7bf7ec4ec5fcd74df6ae85147a5c656c01b984b80c849f140e410bc007.exe
Resource
win10v2004-20220901-en
General
-
Target
ab11fd7bf7ec4ec5fcd74df6ae85147a5c656c01b984b80c849f140e410bc007.exe
-
Size
219KB
-
MD5
9189035b9e47a841a11252bf3bef9100
-
SHA1
648a10aeeb97db5b8da32ab26f33898ea7e1a139
-
SHA256
ab11fd7bf7ec4ec5fcd74df6ae85147a5c656c01b984b80c849f140e410bc007
-
SHA512
e8a59e8b51a76f9011166aae791d417e720223f44bb00d48d2811ba97d91e69a46e3d1b7c497eac59f9fa8e70c244b4dcb03e516b520aaff523d0bada9160bfb
-
SSDEEP
3072:NdKFOoL162F8ZXYekhriiiv/ktZqLFpWkm3U3np6wo/0or04tBRc9:7KF/LAaMYZhriiiHkujnm3kow0rVRc9
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3536 3032 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab11fd7bf7ec4ec5fcd74df6ae85147a5c656c01b984b80c849f140e410bc007.exe"C:\Users\Admin\AppData\Local\Temp\ab11fd7bf7ec4ec5fcd74df6ae85147a5c656c01b984b80c849f140e410bc007.exe"1⤵PID:3032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3032 -s 5442⤵
- Program crash
PID:3536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3032 -ip 30321⤵PID:1812