Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
19s -
max time network
17s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 09:26
Static task
static1
Behavioral task
behavioral1
Sample
a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe
Resource
win10v2004-20220812-en
General
-
Target
a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe
-
Size
13KB
-
MD5
38256bdf6371c6a7b44272dae1ef001b
-
SHA1
685d87f1417555aa3740d9e91119e0ac82973346
-
SHA256
a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a
-
SHA512
1205deb8ea482f5b903f22a7d3693302170366cd9cc1632d696d863e563d9e318642b252d74a3b5739cf0547630c947c810eaabbd4ecf6b230d22013bf73c875
-
SSDEEP
192:oihOXOsgtaOwXgIH106M+FIzYP+VKLcC8IYLJCssSJ+RAIo:6gIOwyF+FIS+VKLcIYNCcLIo
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3508 2064 WerFault.exe 75 3824 2064 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe"C:\Users\Admin\AppData\Local\Temp\a5a33fa3e1797110783328abfc839c073c85bec018f10152e865be637ee6a57a.exe"1⤵PID:2064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 2202⤵
- Program crash
PID:3508
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 2282⤵
- Program crash
PID:3824
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2064 -ip 20641⤵PID:692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2064 -ip 20641⤵PID:4156