Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 04:04
Static task
static1
Behavioral task
behavioral1
Sample
5fb8d35ee53e437448a5560698abc06396dd06f90fa4ab188423d3b50bf51844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fb8d35ee53e437448a5560698abc06396dd06f90fa4ab188423d3b50bf51844.exe
Resource
win10v2004-20220812-en
General
-
Target
5fb8d35ee53e437448a5560698abc06396dd06f90fa4ab188423d3b50bf51844.exe
-
Size
22KB
-
MD5
1bb5c0ee3d7ef9f959b3cb4992ccad38
-
SHA1
9bb690554d76795075a7f6dd28dff9278a75b6b3
-
SHA256
5fb8d35ee53e437448a5560698abc06396dd06f90fa4ab188423d3b50bf51844
-
SHA512
7d1cf6e6d2448c09d95f7eca4c671c6b52de42de5afdbf388805e3c361a8a64bc031ef4c1516bb4565e5c8ecdf48a540d12f023c046703d031aea8498bdc91a4
-
SSDEEP
384:KT0qaFWPMyaZHfnGjSaOFUXUzQwgyZ80200CUgWV6tYUlQVNbT8:rGMyqPGmvFUXPwgyZ8H0W+tYUlQVN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4344 1312 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\5fb8d35ee53e437448a5560698abc06396dd06f90fa4ab188423d3b50bf51844.exe"C:\Users\Admin\AppData\Local\Temp\5fb8d35ee53e437448a5560698abc06396dd06f90fa4ab188423d3b50bf51844.exe"1⤵PID:1312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 2642⤵
- Program crash
PID:4344
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 1312 -ip 13121⤵PID:540