Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
184s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 23:39
Static task
static1
Behavioral task
behavioral1
Sample
a0e08dfc6b96b4494d60b08de5ddc005d5f372915364f45507ff5aa2cc8ac0bf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0e08dfc6b96b4494d60b08de5ddc005d5f372915364f45507ff5aa2cc8ac0bf.exe
Resource
win10v2004-20221111-en
General
-
Target
a0e08dfc6b96b4494d60b08de5ddc005d5f372915364f45507ff5aa2cc8ac0bf.exe
-
Size
59KB
-
MD5
f3b7632b27ab6bc2fde85e3f1cd5d7f5
-
SHA1
e16b3c94bc497b9cb7cc09934efc39146593e4be
-
SHA256
a0e08dfc6b96b4494d60b08de5ddc005d5f372915364f45507ff5aa2cc8ac0bf
-
SHA512
13b392ccadf57a6cf0953c112713a8ae784302998c55eae4ae2afdf336287e8898c9419981ebd7d3050cb8f0f57d010860de1ef29786b95a22f5874414478cc0
-
SSDEEP
768:XZko908ozL9cg/Sy5AT007EmNHEm7ZR7QlC5ofRrnNo/8pso9XUMp:X908AL9W71HHEoR7c3Z5o/ssoyM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1404 1728 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0e08dfc6b96b4494d60b08de5ddc005d5f372915364f45507ff5aa2cc8ac0bf.exe"C:\Users\Admin\AppData\Local\Temp\a0e08dfc6b96b4494d60b08de5ddc005d5f372915364f45507ff5aa2cc8ac0bf.exe"1⤵PID:1728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 2762⤵
- Program crash
PID:1404
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1728 -ip 17281⤵PID:3076