Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
160s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 03:41
Static task
static1
Behavioral task
behavioral1
Sample
25993294b522136c9bdb2ea4df9057c29b5d95f3ad6216870cd8d7643dac0255.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
25993294b522136c9bdb2ea4df9057c29b5d95f3ad6216870cd8d7643dac0255.exe
Resource
win10v2004-20221111-en
General
-
Target
25993294b522136c9bdb2ea4df9057c29b5d95f3ad6216870cd8d7643dac0255.exe
-
Size
738KB
-
MD5
d45172fca4fdf5c60cd436eac9d1cbd0
-
SHA1
ddfeb18d7c091316a2fe5275c565768f00957da4
-
SHA256
25993294b522136c9bdb2ea4df9057c29b5d95f3ad6216870cd8d7643dac0255
-
SHA512
256f4c0829245870cd2bfc2e29835c99e6675e61402bafe9c891080fd5fe7377a05f667b582df695a9783ba21033ead83c676070e78d5138750655b1ad0f2532
-
SSDEEP
12288:WL9uoalDYM1D0XkTWcXu1fdfgfLSSSCSsz6+9XWdxwgNrLhC8JZbVSMX9P:iuoaBz9TtGlfSSTCSsG+tWrwKLhC8bUq
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 836 4592 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\25993294b522136c9bdb2ea4df9057c29b5d95f3ad6216870cd8d7643dac0255.exe"C:\Users\Admin\AppData\Local\Temp\25993294b522136c9bdb2ea4df9057c29b5d95f3ad6216870cd8d7643dac0255.exe"1⤵PID:4592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 2162⤵
- Program crash
PID:836
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4592 -ip 45921⤵PID:1604