Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 03:58
Static task
static1
Behavioral task
behavioral1
Sample
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe
Resource
win10v2004-20220901-en
General
-
Target
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe
-
Size
64KB
-
MD5
2005119fc004f1f548ee2d3213140d4c
-
SHA1
89e2cd931dd0a3cd9a73b19883789a8b40f18f74
-
SHA256
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498
-
SHA512
91cb756e781f89125ea450d2f2bf70016dc3a181e3af40e555be5ccdffa06ffbe311bd7f1914979126f56fde4c7a95f3ee6a4f3c817e0214ef78d91c4bae85ad
-
SSDEEP
768:YXM0aPJQTlS/42KGA8MpXZv9HYGN3hFRLQpjKNQ806OLAlUybYAgIq2/D59x:YTwQQA8MpXZlHJtshK4qSOqwlf
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4936 4868 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe"C:\Users\Admin\AppData\Local\Temp\3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe"1⤵PID:4868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4868 -s 2642⤵
- Program crash
PID:4936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4868 -ip 48681⤵PID:4904