Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
88s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 04:24
Static task
static1
Behavioral task
behavioral1
Sample
62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686.exe
Resource
win10v2004-20220812-en
General
-
Target
62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686.exe
-
Size
500KB
-
MD5
de90ad5fe2e720fb272529a759db43a0
-
SHA1
ed253eeeda4fd42bdc31bcbe81bc3bffe1a6d0ab
-
SHA256
62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686
-
SHA512
2e6626d4aae1fc5e70df180082dd5c02fae1191118da94284c6d9081718c4b3bc86c0cfe062246fa81e67c1527dfcfd64d900a00c7d7d1fc65e92c9453eda773
-
SSDEEP
12288:2edhKjQne2AG6aVi7JV8/efeRijqBqzItW:2efKjQnenaumefgTMa
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1044 4572 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686.exe"C:\Users\Admin\AppData\Local\Temp\62b89c8c8e807dac0ddcd535b9e9e209f21a61dff8806b61f7ec59a8b7bfa686.exe"1⤵PID:4572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4572 -s 4042⤵
- Program crash
PID:1044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 4572 -ip 45721⤵PID:644