Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
163s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 08:10
Static task
static1
Behavioral task
behavioral1
Sample
6159941ba753d348a744a529368cc23c260032392870f518074ae34c6353f6d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6159941ba753d348a744a529368cc23c260032392870f518074ae34c6353f6d2.exe
Resource
win10v2004-20220812-en
General
-
Target
6159941ba753d348a744a529368cc23c260032392870f518074ae34c6353f6d2.exe
-
Size
28KB
-
MD5
3bc8d1da715dd43aacd6a25f0b441b52
-
SHA1
4139bf88e016db236b791dcc7521cb22d4758113
-
SHA256
6159941ba753d348a744a529368cc23c260032392870f518074ae34c6353f6d2
-
SHA512
42eff6331fda4dedb90da1ae94f4a5c2b3935d4f9e3d4e2209e5a6ecc4fc32cb9847f36adcf5ea68061d4d84c9fa603a4e532d41733e57126b873b9f0d60066c
-
SSDEEP
48:f8oBGBeoNORb5lFhEwvRemzjyLsE4JkHRa:ZMNmb5lF7RemQD9xa
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 512 2092 WerFault.exe 79 4956 2092 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\6159941ba753d348a744a529368cc23c260032392870f518074ae34c6353f6d2.exe"C:\Users\Admin\AppData\Local\Temp\6159941ba753d348a744a529368cc23c260032392870f518074ae34c6353f6d2.exe"1⤵PID:2092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2092 -s 2722⤵
- Program crash
PID:512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2092 -s 2762⤵
- Program crash
PID:4956
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2092 -ip 20921⤵PID:3644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2092 -ip 20921⤵PID:5028