Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
191s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 11:19
Static task
static1
Behavioral task
behavioral1
Sample
c089f9187ccec7d0ae31b94a84ff71afa9a8b38e1143816d53991d48309bad08.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c089f9187ccec7d0ae31b94a84ff71afa9a8b38e1143816d53991d48309bad08.exe
Resource
win10v2004-20221111-en
General
-
Target
c089f9187ccec7d0ae31b94a84ff71afa9a8b38e1143816d53991d48309bad08.exe
-
Size
315KB
-
MD5
cb168f0a5b887d48484e24910b620fcc
-
SHA1
4724d009e8b071eee3ba3226a030ba294b09f617
-
SHA256
c089f9187ccec7d0ae31b94a84ff71afa9a8b38e1143816d53991d48309bad08
-
SHA512
a361fbaf1b2120ac1983e8fb1cdae3ac0e7c7a84b313f8b517459fdd2c7af9f0b6067dadbcfc4a3ba9f40d65b7c7b650cc824ef1fbd2f4899a4a182a2bd1c5d8
-
SSDEEP
6144:EYezFue2DQU8I4I2B95Sn3O4PacFK2ygNC51ealFR7iQYZLT+FInaoX0z:E1Eear4Zr5w+ZvNg8q+mQgLBaoEz
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1848 5116 WerFault.exe 81 2516 5116 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c089f9187ccec7d0ae31b94a84ff71afa9a8b38e1143816d53991d48309bad08.exe"C:\Users\Admin\AppData\Local\Temp\c089f9187ccec7d0ae31b94a84ff71afa9a8b38e1143816d53991d48309bad08.exe"1⤵PID:5116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5116 -s 2322⤵
- Program crash
PID:1848
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5116 -s 2682⤵
- Program crash
PID:2516
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5116 -ip 51161⤵PID:176
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5116 -ip 51161⤵PID:2636