Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 01:21
Static task
static1
Behavioral task
behavioral1
Sample
fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e.exe
Resource
win10v2004-20220812-en
General
-
Target
fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e.exe
-
Size
79KB
-
MD5
58fd25534d6929d9b8b8f05e5f377bee
-
SHA1
15a69a8634192c26c0df92b5fb475aff9aad7a3f
-
SHA256
fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e
-
SHA512
4fd6d8a5137239daf42f2c58938152f0400f3ca95e2b2432e13bb636a7490dd2fc7a3c97f4d9693026579ee5edf27bce626f056ddebe4db2bf73b100f03663d6
-
SSDEEP
1536:p3aPz4TcV5C09M46W4hVB/VAzt+7zfzmDSf4+oKm+H32JafyE0ws0Y:p3aPz4TcVtMR+k7zf0+oKm43uaJNY
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1080 1084 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e.exe"C:\Users\Admin\AppData\Local\Temp\fca4c1556235f1c6d607351b0d29f0b60c48121dc057687db2bad47c34c02f2e.exe"1⤵PID:1084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 3962⤵
- Program crash
PID:1080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1084 -ip 10841⤵PID:4544