Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
175s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
0bef836fc9e4162fad6bb286c0ba921503795adf1fd4bec1965fd5327eb003e7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0bef836fc9e4162fad6bb286c0ba921503795adf1fd4bec1965fd5327eb003e7.exe
Resource
win10v2004-20220812-en
General
-
Target
0bef836fc9e4162fad6bb286c0ba921503795adf1fd4bec1965fd5327eb003e7.exe
-
Size
275KB
-
MD5
0f0f1ff6bc970e7d1fb8313b11492995
-
SHA1
bc2259a7b68d86e2a8348d3345c7b0ce6a1fe8f4
-
SHA256
0bef836fc9e4162fad6bb286c0ba921503795adf1fd4bec1965fd5327eb003e7
-
SHA512
f95028a1d13e1c08dd5b04385a2d2b85b87ed2b68d29d267cf19e397938b8a83f66207b76a02d956bba25a22d9735917aefa742a9fcc652e6a17cf2d967a2093
-
SSDEEP
3072:XYYrH5Yb5MpZ3hKSuWdvBm/65p/vzRsUYQTQMt/slXkQKWjtGKvyujfmo5X6dfki:x5SUX9wKTRmQME0umtG9s+o5EfnN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4108 4412 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\0bef836fc9e4162fad6bb286c0ba921503795adf1fd4bec1965fd5327eb003e7.exe"C:\Users\Admin\AppData\Local\Temp\0bef836fc9e4162fad6bb286c0ba921503795adf1fd4bec1965fd5327eb003e7.exe"1⤵PID:4412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4412 -s 6322⤵
- Program crash
PID:4108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4412 -ip 44121⤵PID:1408