Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
187s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23/11/2022, 19:50
Static task
static1
Behavioral task
behavioral1
Sample
b50670e48fc3bfe9411fc256c1c78c1b553e7fba7fca572e9fa23365dd820080.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b50670e48fc3bfe9411fc256c1c78c1b553e7fba7fca572e9fa23365dd820080.exe
Resource
win10v2004-20221111-en
General
-
Target
b50670e48fc3bfe9411fc256c1c78c1b553e7fba7fca572e9fa23365dd820080.exe
-
Size
65KB
-
MD5
597295614ee253687244e3414c3a23f0
-
SHA1
1946bf4fd1ec3f8b1f251a90952cad623c1383a7
-
SHA256
b50670e48fc3bfe9411fc256c1c78c1b553e7fba7fca572e9fa23365dd820080
-
SHA512
5c936d74a2611686cc2533b1a544c92fccc2640f8a31dcd6bb340dd44e7d30a1ce5a701e6addef5f00ffbb98dffac81831a2b07968e27ced554f8a8a12f3c017
-
SSDEEP
1536:2V0mTTtDOYjc9PqAnfWyGzAAClqKPLJ9mu6KoE9apYFsSPdkD6liAW2nylBZolwC:2DRUkf3hC4KPN936tE9PjdkD6liAWjl2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4312 1224 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b50670e48fc3bfe9411fc256c1c78c1b553e7fba7fca572e9fa23365dd820080.exe"C:\Users\Admin\AppData\Local\Temp\b50670e48fc3bfe9411fc256c1c78c1b553e7fba7fca572e9fa23365dd820080.exe"1⤵PID:1224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1224 -s 5882⤵
- Program crash
PID:4312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1224 -ip 12241⤵PID:4008