Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
204s -
max time network
211s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 15:59
Static task
static1
Behavioral task
behavioral1
Sample
f8706ea6ca69ea2c540febe6a59702084b930776fa47b39497272b46a0540062.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f8706ea6ca69ea2c540febe6a59702084b930776fa47b39497272b46a0540062.exe
Resource
win10v2004-20221111-en
General
-
Target
f8706ea6ca69ea2c540febe6a59702084b930776fa47b39497272b46a0540062.exe
-
Size
351KB
-
MD5
5535994fb3a321f28bfec5c4ca9a6cb9
-
SHA1
f3d2afeb4b358cea835d30d5148c54b514aa84a4
-
SHA256
f8706ea6ca69ea2c540febe6a59702084b930776fa47b39497272b46a0540062
-
SHA512
19041c7c29106fd8118bfee156593d3e824234e28413357e9759d320c5cece0c4ffc26ef7c68e7b28bccbc4c5c0c83aa4e35ed6872ef9b84c4b667a470d64763
-
SSDEEP
6144:Z3c4cg0RO2MRcCv/5uj7Pe5waEnYCqqGDWLvePE2+EJXeOeZydt:ZiBTMRcCvh27GunAhWr4EpEJXeTA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4704 4288 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\f8706ea6ca69ea2c540febe6a59702084b930776fa47b39497272b46a0540062.exe"C:\Users\Admin\AppData\Local\Temp\f8706ea6ca69ea2c540febe6a59702084b930776fa47b39497272b46a0540062.exe"1⤵PID:4288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4288 -s 4322⤵
- Program crash
PID:4704
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4288 -ip 42881⤵PID:1312