Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
73s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 19:28
Static task
static1
Behavioral task
behavioral1
Sample
ae80adf0be2f6544d178b6803b82a6e1d4cc351d0715dd12818d01d87ac7769e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae80adf0be2f6544d178b6803b82a6e1d4cc351d0715dd12818d01d87ac7769e.exe
Resource
win10v2004-20220901-en
General
-
Target
ae80adf0be2f6544d178b6803b82a6e1d4cc351d0715dd12818d01d87ac7769e.exe
-
Size
661KB
-
MD5
04c86e610edb9112884fddf1143e0f50
-
SHA1
bb7cb68336546f66be3092451991ea66f355cc99
-
SHA256
ae80adf0be2f6544d178b6803b82a6e1d4cc351d0715dd12818d01d87ac7769e
-
SHA512
a9e2e4abf015cfaa03552bacd0d99242a37a8b41780df7572957aee4dbe329aca0adf63bafef85cdb01236f32d4d1a1d65a36f45d23d1c8972c429410d0e2479
-
SSDEEP
12288:FOHyWKAEp7nE1Ikom9IVOUnTLqoTnwBjdpnGVmIGQs9wG7O1tuT:FSy1p7nE1IlVdTLqLjTnGVmIGn761
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4808 4928 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae80adf0be2f6544d178b6803b82a6e1d4cc351d0715dd12818d01d87ac7769e.exe"C:\Users\Admin\AppData\Local\Temp\ae80adf0be2f6544d178b6803b82a6e1d4cc351d0715dd12818d01d87ac7769e.exe"1⤵PID:4928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4928 -s 5002⤵
- Program crash
PID:4808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 4928 -ip 49281⤵PID:1344