Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 09:08
Static task
static1
Behavioral task
behavioral1
Sample
dd36e0274717b91507b00b0ce35ef28669739958c7e0db2c94671b3c4258c228.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd36e0274717b91507b00b0ce35ef28669739958c7e0db2c94671b3c4258c228.exe
Resource
win10v2004-20221111-en
General
-
Target
dd36e0274717b91507b00b0ce35ef28669739958c7e0db2c94671b3c4258c228.exe
-
Size
7KB
-
MD5
dd8ff67f3f997d2d0ed7e5638b200411
-
SHA1
35ceb758db8984d2549bd24f702db74717540a88
-
SHA256
dd36e0274717b91507b00b0ce35ef28669739958c7e0db2c94671b3c4258c228
-
SHA512
43c97275daf24087fa1a3e2f51e0f9d71b9dcc8cfe4a17af91dcbbe0699f22d30e31e221d241ca5f64dde88487a24c1b048a604a996a82cbd0fea10e1762fd34
-
SSDEEP
192:aeIZpTxEZzsgG+qxTiHf8v3HmYIPvij5/agJD116bO0X:dETeq9+qsEPmBP8agR114nX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1952 1624 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd36e0274717b91507b00b0ce35ef28669739958c7e0db2c94671b3c4258c228.exe"C:\Users\Admin\AppData\Local\Temp\dd36e0274717b91507b00b0ce35ef28669739958c7e0db2c94671b3c4258c228.exe"1⤵PID:1624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1624 -s 2202⤵
- Program crash
PID:1952
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 1624 -ip 16241⤵PID:1632