Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 06:44
Static task
static1
Behavioral task
behavioral1
Sample
ff2628fd5358a920a8577f922035301312ba786a82047084138030477596ed96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff2628fd5358a920a8577f922035301312ba786a82047084138030477596ed96.exe
Resource
win10v2004-20220812-en
General
-
Target
ff2628fd5358a920a8577f922035301312ba786a82047084138030477596ed96.exe
-
Size
607KB
-
MD5
2dea7220f0fd86e4faabfc9916047a90
-
SHA1
33a93336e0414f8b3bd545d4b9ffa369badb3b26
-
SHA256
ff2628fd5358a920a8577f922035301312ba786a82047084138030477596ed96
-
SHA512
d5744bc7f3dc2239ed5a3f5233fe1e371926f028179c4ac9449b2f5ebe45b18934fdc9b8cf0825f4b7a495ebfda24085313bdcb5826d80255d2ad920d65b6927
-
SSDEEP
12288:buYSlGyS5Z5Z5sy/y/yS5syS5sy81yS5sy/y/yS5Z5syg:PSlTeaa22802aaSg
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2588 4244 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff2628fd5358a920a8577f922035301312ba786a82047084138030477596ed96.exe"C:\Users\Admin\AppData\Local\Temp\ff2628fd5358a920a8577f922035301312ba786a82047084138030477596ed96.exe"1⤵PID:4244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4244 -s 2922⤵
- Program crash
PID:2588
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4244 -ip 42441⤵PID:3208