Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
189s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 01:17
Static task
static1
Behavioral task
behavioral1
Sample
21f093727c16ff5e6b77634c537ad0f1ab3c93357a41a6b1e38edb659424c2a7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
21f093727c16ff5e6b77634c537ad0f1ab3c93357a41a6b1e38edb659424c2a7.exe
Resource
win10v2004-20221111-en
General
-
Target
21f093727c16ff5e6b77634c537ad0f1ab3c93357a41a6b1e38edb659424c2a7.exe
-
Size
146KB
-
MD5
2b263f60c592afc5975d4a1b0ecdc1b0
-
SHA1
7df5fb71bf523ef94e503d3517f8822adb1a9623
-
SHA256
21f093727c16ff5e6b77634c537ad0f1ab3c93357a41a6b1e38edb659424c2a7
-
SHA512
666c7637327d071314dbf016906ba15350baaade3a6f686b518f8a010de7eb4ad2fa9c1476e1451ec67dcf3c5f4b3e45f7b8721f97fc745f076532b76a36a4cb
-
SSDEEP
3072:SjUrEDD3+0aSrBd5Rov8XZ5EPO+sQJxA5ouw6TLZxPf:SQwHO0hTEvqZ5/RMkLZJ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1352 2740 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\21f093727c16ff5e6b77634c537ad0f1ab3c93357a41a6b1e38edb659424c2a7.exe"C:\Users\Admin\AppData\Local\Temp\21f093727c16ff5e6b77634c537ad0f1ab3c93357a41a6b1e38edb659424c2a7.exe"1⤵PID:2740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 4802⤵
- Program crash
PID:1352
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2740 -ip 27401⤵PID:2208