Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
187s -
max time network
211s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 18:12
Static task
static1
Behavioral task
behavioral1
Sample
c304fd7acf7fcb3dbab840f1d6dc0388d19627918e417ee9b6d60dc80c042359.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c304fd7acf7fcb3dbab840f1d6dc0388d19627918e417ee9b6d60dc80c042359.exe
Resource
win10v2004-20221111-en
General
-
Target
c304fd7acf7fcb3dbab840f1d6dc0388d19627918e417ee9b6d60dc80c042359.exe
-
Size
750KB
-
MD5
d132515ab0fa06aa8a76295ec05b099d
-
SHA1
bc990d1c866045dd8254be01a2021c2fc54030fa
-
SHA256
c304fd7acf7fcb3dbab840f1d6dc0388d19627918e417ee9b6d60dc80c042359
-
SHA512
933f82a9e535f79028fd41f61b583be0ef710afea3f275a6a69d5c69d053e2c7a4eba4569e4286a51b998335e5c9417fcecb18420a424539ad5eb5082aca2145
-
SSDEEP
12288:HRn8S++U4u/n/8ZdW5A0zyo6JwQ5oAlK+GEHvZ+IkZwQQ52LYRgVpLPwPRtA:x8MU4ufMdW5A2mJr/kWHvsIkZXNU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 308 1396 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c304fd7acf7fcb3dbab840f1d6dc0388d19627918e417ee9b6d60dc80c042359.exe"C:\Users\Admin\AppData\Local\Temp\c304fd7acf7fcb3dbab840f1d6dc0388d19627918e417ee9b6d60dc80c042359.exe"1⤵PID:1396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1396 -s 5202⤵
- Program crash
PID:308
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1396 -ip 13961⤵PID:1652