Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 07:51
Static task
static1
Behavioral task
behavioral1
Sample
23136fbbbc5be4d419cdfe967a9ac1204c01e31b24bfa651184f4fc3e6f4461e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23136fbbbc5be4d419cdfe967a9ac1204c01e31b24bfa651184f4fc3e6f4461e.exe
Resource
win10v2004-20221111-en
General
-
Target
23136fbbbc5be4d419cdfe967a9ac1204c01e31b24bfa651184f4fc3e6f4461e.exe
-
Size
41KB
-
MD5
3b27a7ceec761070ec32abeb631c3940
-
SHA1
065c6736fa5666b104b7d815cc72fcd81a4a8198
-
SHA256
23136fbbbc5be4d419cdfe967a9ac1204c01e31b24bfa651184f4fc3e6f4461e
-
SHA512
a256641a9896b59f041652e66c08367f8d4cae9277aaf798c6540036c97aca1fb6d5acdd3f64dc73886cd88e268bcfd9c754fa91e205d4ca2f4a57c8cd089202
-
SSDEEP
768:x/L9RQZbq3XN3ruUeN16JTLLCpGMvCKxbo3kmzwfkxLpMnFxyFX7:DRWkNbu7NyLLEGGp6liUC3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4212 1816 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\23136fbbbc5be4d419cdfe967a9ac1204c01e31b24bfa651184f4fc3e6f4461e.exe"C:\Users\Admin\AppData\Local\Temp\23136fbbbc5be4d419cdfe967a9ac1204c01e31b24bfa651184f4fc3e6f4461e.exe"1⤵PID:1816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1816 -s 4762⤵
- Program crash
PID:4212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1816 -ip 18161⤵PID:4988