Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
84s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 01:13
Static task
static1
Behavioral task
behavioral1
Sample
05afb622bfeb37e9ea140ca65f3ee175cf43d03c3bd01af90170c6054709425c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
05afb622bfeb37e9ea140ca65f3ee175cf43d03c3bd01af90170c6054709425c.exe
Resource
win10v2004-20220812-en
General
-
Target
05afb622bfeb37e9ea140ca65f3ee175cf43d03c3bd01af90170c6054709425c.exe
-
Size
2.1MB
-
MD5
356013f7206ece95dfdb1510d1c14293
-
SHA1
bb1e765ce481b640a90261d02282fc8c399a9ac6
-
SHA256
05afb622bfeb37e9ea140ca65f3ee175cf43d03c3bd01af90170c6054709425c
-
SHA512
fcb79438343fa55b0d34cc8c8262e1db7c4d07ddaae19f9e4b70f302c4ddaf3d64f457affd3f105ff27bf23d6f44f9b87c528d8fdb1e4c1d4357723a2da5e6fe
-
SSDEEP
49152:hnbVsUWM+I9Fci2Gylv3CGLut45iQgQfTV6bwMD+dv+d5ft3k:hnbVsUbhXqSGKt45iLQbUbPD+d8t0
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3172 876 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\05afb622bfeb37e9ea140ca65f3ee175cf43d03c3bd01af90170c6054709425c.exe"C:\Users\Admin\AppData\Local\Temp\05afb622bfeb37e9ea140ca65f3ee175cf43d03c3bd01af90170c6054709425c.exe"1⤵PID:876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 876 -s 4242⤵
- Program crash
PID:3172
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 876 -ip 8761⤵PID:1552