Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 03:44
Static task
static1
Behavioral task
behavioral1
Sample
feb48a1a0fe03d630e7d23574c58af44c55c6a60fe71ffc62c0bd6405ec02856.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
feb48a1a0fe03d630e7d23574c58af44c55c6a60fe71ffc62c0bd6405ec02856.exe
Resource
win10v2004-20220901-en
General
-
Target
feb48a1a0fe03d630e7d23574c58af44c55c6a60fe71ffc62c0bd6405ec02856.exe
-
Size
963KB
-
MD5
121e26b440cd28d042489e4fb670e600
-
SHA1
9df4ead5b6d82c5d05622ab9705feb4dfbbda6d9
-
SHA256
feb48a1a0fe03d630e7d23574c58af44c55c6a60fe71ffc62c0bd6405ec02856
-
SHA512
67e3176cdb094f62485c8d629eef6528472d0a97f320353f0b835a45b2df2113dd382a971c32374e20e1727af00832800a2396394535313112621a053790e78a
-
SSDEEP
12288:fZOU58SlsSliSlb6XVDU1I+4+5+by/y/y/yS5sy/yS5sy/y/y/yS5sy/y/yS5Z5/:fZOxSlsSliSlyglaaa2a2aaa2aaeaaas
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4996 2284 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\feb48a1a0fe03d630e7d23574c58af44c55c6a60fe71ffc62c0bd6405ec02856.exe"C:\Users\Admin\AppData\Local\Temp\feb48a1a0fe03d630e7d23574c58af44c55c6a60fe71ffc62c0bd6405ec02856.exe"1⤵PID:2284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 2642⤵
- Program crash
PID:4996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2284 -ip 22841⤵PID:5076