Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
171s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 14:01
Static task
static1
Behavioral task
behavioral1
Sample
243428021b2c19278959251cc66955ed1466fda7563257c99a0d00b551ff154a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
243428021b2c19278959251cc66955ed1466fda7563257c99a0d00b551ff154a.exe
Resource
win10v2004-20220812-en
General
-
Target
243428021b2c19278959251cc66955ed1466fda7563257c99a0d00b551ff154a.exe
-
Size
219KB
-
MD5
0649d3850f0816634c7c0e2d380d7773
-
SHA1
66937a67c71e5ef08c69353dc4f99ca0d7c035e9
-
SHA256
243428021b2c19278959251cc66955ed1466fda7563257c99a0d00b551ff154a
-
SHA512
1ff6b846c73ecd4de074f072bf0c02c33578d16d8181b7f8864396452e899a2417004b3cd32f5e867d3dae0aec89bd7101bc47301f203e2632c4a334ffb81aef
-
SSDEEP
3072:l96NQQ765ICiH6PhIJrOvOrhKdwPKW3asorAO52isOtiUzz05dv17mR:ONQQ7IuaPmJyvOdKuiCorp9rzzgdN7
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 392 1216 WerFault.exe 76 380 1216 WerFault.exe 76
Processes
-
C:\Users\Admin\AppData\Local\Temp\243428021b2c19278959251cc66955ed1466fda7563257c99a0d00b551ff154a.exe"C:\Users\Admin\AppData\Local\Temp\243428021b2c19278959251cc66955ed1466fda7563257c99a0d00b551ff154a.exe"1⤵PID:1216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1216 -s 2842⤵
- Program crash
PID:392
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1216 -s 2842⤵
- Program crash
PID:380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1216 -ip 12161⤵PID:4720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 1216 -ip 12161⤵PID:3452