Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 18:06
Static task
static1
Behavioral task
behavioral1
Sample
2a0262eb824da39526bbe4b4c031a94572a99b960433423bbf78593dc8630489.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a0262eb824da39526bbe4b4c031a94572a99b960433423bbf78593dc8630489.exe
Resource
win10v2004-20220812-en
General
-
Target
2a0262eb824da39526bbe4b4c031a94572a99b960433423bbf78593dc8630489.exe
-
Size
38KB
-
MD5
01756e62763c48f8e22e26525c676e50
-
SHA1
e6a3d1fcd608d5d6c1581b778b34e350588a37ab
-
SHA256
2a0262eb824da39526bbe4b4c031a94572a99b960433423bbf78593dc8630489
-
SHA512
bc2adbe1554f62e383ad55ad1915758dab22290a51122bbd660f26d1d008871f0322d85420f00f8053d366e8d52a588713cd68624412cb229583bc2df419568b
-
SSDEEP
768:a0kil69HY65pw2tcDg/NG/QzAXNp3d/AKBU8OGSS53+zI:Bl6a65pwgcM/NnzUNYKYGSUOzI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3104 4852 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a0262eb824da39526bbe4b4c031a94572a99b960433423bbf78593dc8630489.exe"C:\Users\Admin\AppData\Local\Temp\2a0262eb824da39526bbe4b4c031a94572a99b960433423bbf78593dc8630489.exe"1⤵PID:4852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4852 -s 3162⤵
- Program crash
PID:3104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4852 -ip 48521⤵PID:4740