Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/11/2022, 23:08
Static task
static1
Behavioral task
behavioral1
Sample
b20431da56d78c2c7bc658ce1e5bcbe4d736e187bdf96f289cc1c116cd1a6ac4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b20431da56d78c2c7bc658ce1e5bcbe4d736e187bdf96f289cc1c116cd1a6ac4.exe
Resource
win10v2004-20220812-en
General
-
Target
b20431da56d78c2c7bc658ce1e5bcbe4d736e187bdf96f289cc1c116cd1a6ac4.exe
-
Size
815KB
-
MD5
6e8b468ea35cf4b766bdd8673e0dbae5
-
SHA1
306c216b2d463d28349f1d82ed055b9c730ab8a3
-
SHA256
b20431da56d78c2c7bc658ce1e5bcbe4d736e187bdf96f289cc1c116cd1a6ac4
-
SHA512
7f9292298c286e8a1fdeef5375a06a0e56785fa16eb67c59f3f5c7b4c77e0f02a36d04fd2bbcd1566a58de8193a9fed742124ddb7b3bff2bb9f52553bf7c864f
-
SSDEEP
24576:vHnM9Gxn5lf/n0HQIhaGYNt0TK2uIo2ma4:vHK65lfP07haGYNuTKH53
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5052 956 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\b20431da56d78c2c7bc658ce1e5bcbe4d736e187bdf96f289cc1c116cd1a6ac4.exe"C:\Users\Admin\AppData\Local\Temp\b20431da56d78c2c7bc658ce1e5bcbe4d736e187bdf96f289cc1c116cd1a6ac4.exe"1⤵PID:956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 956 -s 3842⤵
- Program crash
PID:5052
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 956 -ip 9561⤵PID:5016