Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 08:58
Static task
static1
Behavioral task
behavioral1
Sample
4cf639f71d7f3423d995f5333871b13c0f3dd84b7be2e8d03198b9f0dd55447d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cf639f71d7f3423d995f5333871b13c0f3dd84b7be2e8d03198b9f0dd55447d.exe
Resource
win10v2004-20220901-en
General
-
Target
4cf639f71d7f3423d995f5333871b13c0f3dd84b7be2e8d03198b9f0dd55447d.exe
-
Size
42KB
-
MD5
15deec508d5831edc29c1a1c4074e161
-
SHA1
d966afb4fcef4e1b179e2941c1b5d80f4d3affa5
-
SHA256
4cf639f71d7f3423d995f5333871b13c0f3dd84b7be2e8d03198b9f0dd55447d
-
SHA512
3b1db4f5675950a1e8814bdc4d2b73c5e67fb2ae77d337ae76839fcf9cdcd3387ac215c2cc2b7da2306f57ec440c95ed828a26cee2233ae7bc60e0f0945bfc5c
-
SSDEEP
384:raYudbzCbr3O0ueSP3TG8rjgekaZFY3nHhs94fOlb+zmzG0Kq6x6ahJipiSldk:zu2VSPTZrjRFknHhq6bRxphJis22
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3716 3376 WerFault.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\4cf639f71d7f3423d995f5333871b13c0f3dd84b7be2e8d03198b9f0dd55447d.exe"C:\Users\Admin\AppData\Local\Temp\4cf639f71d7f3423d995f5333871b13c0f3dd84b7be2e8d03198b9f0dd55447d.exe"1⤵PID:3376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3376 -s 1882⤵
- Program crash
PID:3716
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3376 -ip 33761⤵PID:3804