Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
182s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 05:14
Static task
static1
Behavioral task
behavioral1
Sample
7ab05d53451ac7856c7c40829cd62eb7ab2bca19f7bc7ce455bc492f7ac234f5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7ab05d53451ac7856c7c40829cd62eb7ab2bca19f7bc7ce455bc492f7ac234f5.exe
Resource
win10v2004-20221111-en
General
-
Target
7ab05d53451ac7856c7c40829cd62eb7ab2bca19f7bc7ce455bc492f7ac234f5.exe
-
Size
214KB
-
MD5
164378a37d680ba3ee8500f066723932
-
SHA1
d3de4d7f6b29912b02adf2067a76be4f7520cf74
-
SHA256
7ab05d53451ac7856c7c40829cd62eb7ab2bca19f7bc7ce455bc492f7ac234f5
-
SHA512
4e47ac11a555e5ac2989d2b28bf62a40270210bd792634441084f7dee45845cfca9ba51288b6d941cd56d445ce478ca07decbd8c714449afb012699102e64490
-
SSDEEP
6144:tUmraZuyHgXQgvyj/dCiyfLasKS8WW6INk:tUmraZvH6riyja48p6sk
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1388 1116 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ab05d53451ac7856c7c40829cd62eb7ab2bca19f7bc7ce455bc492f7ac234f5.exe"C:\Users\Admin\AppData\Local\Temp\7ab05d53451ac7856c7c40829cd62eb7ab2bca19f7bc7ce455bc492f7ac234f5.exe"1⤵PID:1116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1116 -s 2282⤵
- Program crash
PID:1388
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1116 -ip 11161⤵PID:4024