Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
20s -
max time network
2s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 20:28
Static task
static1
Behavioral task
behavioral1
Sample
ece188453e960cf97e39cf289af4f5464f2f983525ce827de53d4b06c5124719.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ece188453e960cf97e39cf289af4f5464f2f983525ce827de53d4b06c5124719.exe
Resource
win10v2004-20220812-en
General
-
Target
ece188453e960cf97e39cf289af4f5464f2f983525ce827de53d4b06c5124719.exe
-
Size
1.4MB
-
MD5
0ef6554881d1e0c77d7a5813f4914510
-
SHA1
ea69bd48c8902ea8c86d286ba421af76eb681883
-
SHA256
ece188453e960cf97e39cf289af4f5464f2f983525ce827de53d4b06c5124719
-
SHA512
aa8b6979175c4272a62057b369842f6df4723c802bf1c80b373f027a03d086d38f4d185e17762003c86adf5e784170e22688ff39c686cc357d3914810d0312d1
-
SSDEEP
24576:Dv34645NprTjeti3o7lG4SAqSebdTPhO:Dva5njeDlG49Jea
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3012 2228 WerFault.exe 74
Processes
-
C:\Users\Admin\AppData\Local\Temp\ece188453e960cf97e39cf289af4f5464f2f983525ce827de53d4b06c5124719.exe"C:\Users\Admin\AppData\Local\Temp\ece188453e960cf97e39cf289af4f5464f2f983525ce827de53d4b06c5124719.exe"1⤵PID:2228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 5762⤵
- Program crash
PID:3012
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2228 -ip 22281⤵PID:4832