Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 16:45
Static task
static1
Behavioral task
behavioral1
Sample
67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe
Resource
win10v2004-20220901-en
General
-
Target
67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe
-
Size
56KB
-
MD5
0d8e34a7b47546715ebf31dd2c3eea7a
-
SHA1
0ea181b3b4257bcc1324a1cdf15bead86ff1aba8
-
SHA256
67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96
-
SHA512
e76e6f4baee33a23537d07b9f7483819357d7e483b06604ece050a08226bb37360e71a4eb61ce1cd46e964447f2905491ac0b35c8f1b8a9bd98506ef7f4ab5d0
-
SSDEEP
768:eY1rFXME+43i9qM+5vb9r/JpfuPPHaGRDtw:eYZJx+997qr/qaGRD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4748 2412 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe"C:\Users\Admin\AppData\Local\Temp\67d2093f904712eba45f75e91c65361bd4454ef1215e058c09380b1653db7f96.exe"1⤵PID:2412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 3722⤵
- Program crash
PID:4748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2412 -ip 24121⤵PID:2184