Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
290s -
max time network
312s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 04:38
Static task
static1
Behavioral task
behavioral1
Sample
9b3a3450c89fa02ee2605f8945c915eecfae9562793ff11399aa5e53ab55890c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b3a3450c89fa02ee2605f8945c915eecfae9562793ff11399aa5e53ab55890c.exe
Resource
win10v2004-20221111-en
General
-
Target
9b3a3450c89fa02ee2605f8945c915eecfae9562793ff11399aa5e53ab55890c.exe
-
Size
157KB
-
MD5
41ab3d1e4b7688937871f9bc5b14ed80
-
SHA1
3a10cfac3bd20cb3cc5be20d3582361d983dadd6
-
SHA256
9b3a3450c89fa02ee2605f8945c915eecfae9562793ff11399aa5e53ab55890c
-
SHA512
bc9903660b3b7560577b7ad035d698544e9c88b16a78e68b116b59c0d718720502dbe1c519d094378dda6497d31d6aa7a41b1fbb5ca0570af846189ba98346d0
-
SSDEEP
3072:Nl6EgmJBkSju7dMIplpdWnWf1WYCPTkG8M8kwkRqX66po:N3BPju7B3zjNWlIG88wk666q
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2316 3564 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b3a3450c89fa02ee2605f8945c915eecfae9562793ff11399aa5e53ab55890c.exe"C:\Users\Admin\AppData\Local\Temp\9b3a3450c89fa02ee2605f8945c915eecfae9562793ff11399aa5e53ab55890c.exe"1⤵PID:3564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3564 -s 3442⤵
- Program crash
PID:2316
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3564 -ip 35641⤵PID:2096