Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 18:18
Static task
static1
Behavioral task
behavioral1
Sample
466cf240163bcd95c18270d1c6d95e7584d467904da2cca4462a23a26df7a747.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
466cf240163bcd95c18270d1c6d95e7584d467904da2cca4462a23a26df7a747.exe
Resource
win10v2004-20220901-en
General
-
Target
466cf240163bcd95c18270d1c6d95e7584d467904da2cca4462a23a26df7a747.exe
-
Size
112KB
-
MD5
8f3c52b999158724391bee95f9a6eac9
-
SHA1
f794ccc43013a23a75187dea066cfd2ae9ead7f2
-
SHA256
466cf240163bcd95c18270d1c6d95e7584d467904da2cca4462a23a26df7a747
-
SHA512
5eb7394f170cfd64d4b40a97632d77cd05d4ef02532e757b05c9eca4872495b33b44c8104e230e19f53ed54c79cd5fbd55312580df4393f6ec329695058f6d6d
-
SSDEEP
3072:qM6UkltpwBfJQtbgTGI7UOFosOXvogmBz:qM6/Op8U6XAoRX+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4828 2444 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\466cf240163bcd95c18270d1c6d95e7584d467904da2cca4462a23a26df7a747.exe"C:\Users\Admin\AppData\Local\Temp\466cf240163bcd95c18270d1c6d95e7584d467904da2cca4462a23a26df7a747.exe"1⤵PID:2444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2444 -s 3882⤵
- Program crash
PID:4828
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2444 -ip 24441⤵PID:1400