Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
186s -
max time network
216s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 02:18
Static task
static1
Behavioral task
behavioral1
Sample
8ac70b0660835947fb8511ac0ac594f1593dd3545a78fa7decda9e2f07ba73c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ac70b0660835947fb8511ac0ac594f1593dd3545a78fa7decda9e2f07ba73c6.exe
Resource
win10v2004-20221111-en
General
-
Target
8ac70b0660835947fb8511ac0ac594f1593dd3545a78fa7decda9e2f07ba73c6.exe
-
Size
5KB
-
MD5
a02e55aed02099d1b6de49c42e498a12
-
SHA1
95f973ef7dce736f95535eb109f74da534d043d4
-
SHA256
8ac70b0660835947fb8511ac0ac594f1593dd3545a78fa7decda9e2f07ba73c6
-
SHA512
652d143316aeb82acf3e99116f71455fc8774d7cb71b7f3d6c930d34a890ee0bb4280e77ba4d2301841b07e928338c55c004d4603bc9e7ebe8bb8503ee8260f7
-
SSDEEP
96:9UKFhEpEWgpNo6WwJ6HJwoEfuntZgsxNVcW:9UKHEqWUnWwcJ6fuFNVT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2696 4888 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ac70b0660835947fb8511ac0ac594f1593dd3545a78fa7decda9e2f07ba73c6.exe"C:\Users\Admin\AppData\Local\Temp\8ac70b0660835947fb8511ac0ac594f1593dd3545a78fa7decda9e2f07ba73c6.exe"1⤵PID:4888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4888 -s 2522⤵
- Program crash
PID:2696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4888 -ip 48881⤵PID:4696