Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
162s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 18:30
Behavioral task
behavioral1
Sample
86e0ed083ab331ddf2a320b746f02a9d7761292cb37394e1bbf21ee98e53e1c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86e0ed083ab331ddf2a320b746f02a9d7761292cb37394e1bbf21ee98e53e1c6.exe
Resource
win10v2004-20220812-en
General
-
Target
86e0ed083ab331ddf2a320b746f02a9d7761292cb37394e1bbf21ee98e53e1c6.exe
-
Size
891KB
-
MD5
9834c5212cab5f2ffa431cdd65120139
-
SHA1
88198d2dd4d94914157874c0a1c25b8ba390f45a
-
SHA256
86e0ed083ab331ddf2a320b746f02a9d7761292cb37394e1bbf21ee98e53e1c6
-
SHA512
b93f36223e6e7eb890aebcadfbba25d276ffa2b5b5c6deed4679d185b070512dc16901e617006ac273d3b99bcc57a8a00af17e85903eb03f223138aee69be8a1
-
SSDEEP
24576:iY4yZnRpffBv1vD6QyPqByMB834JWmJL:+yRpnfeQdIh34kmJ
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4288-132-0x0000000000400000-0x0000000000877000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 4940 4288 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\86e0ed083ab331ddf2a320b746f02a9d7761292cb37394e1bbf21ee98e53e1c6.exe"C:\Users\Admin\AppData\Local\Temp\86e0ed083ab331ddf2a320b746f02a9d7761292cb37394e1bbf21ee98e53e1c6.exe"1⤵PID:4288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4288 -s 5242⤵
- Program crash
PID:4940
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4288 -ip 42881⤵PID:4772