Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
190s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 15:44
Static task
static1
Behavioral task
behavioral1
Sample
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe
Resource
win10v2004-20221111-en
General
-
Target
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe
-
Size
72KB
-
MD5
d3841b0a658b70194f73b0ba105f792f
-
SHA1
b3da74cc0190df5e6f19ac21fe662b3dcbd8eed3
-
SHA256
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979
-
SHA512
3a29cf73fb068c33052d93762ac307432a52767998c730107fbe883134f9c4b008dc1fb5db821a6749e72bb20056ef8fb9045516957755aca2a3edfa8d8a599d
-
SSDEEP
1536:ZUFQfEcm/El8Vq1wLf/fyud+Li3f1zwQVgvmA:Zkp8aqMnfymIiv1zwLvmA
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2240 4632 WerFault.exe 81 2964 4632 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe"C:\Users\Admin\AppData\Local\Temp\ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe"1⤵PID:4632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4632 -s 2242⤵
- Program crash
PID:2240
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4632 -s 2282⤵
- Program crash
PID:2964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4632 -ip 46321⤵PID:4360
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4632 -ip 46321⤵PID:1860