Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
195s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 02:26
Static task
static1
Behavioral task
behavioral1
Sample
fdefa2fd39f7f6d4412feccb13c06151f73f221549b4fa575ac1e4f6beab7545.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fdefa2fd39f7f6d4412feccb13c06151f73f221549b4fa575ac1e4f6beab7545.exe
Resource
win10v2004-20221111-en
General
-
Target
fdefa2fd39f7f6d4412feccb13c06151f73f221549b4fa575ac1e4f6beab7545.exe
-
Size
116KB
-
MD5
a2c7aaaae0253c186670e6678e653d79
-
SHA1
c0ac19e51ae70cc3f200c2c43f83854073fe1790
-
SHA256
fdefa2fd39f7f6d4412feccb13c06151f73f221549b4fa575ac1e4f6beab7545
-
SHA512
7f1abfd97f7afef41feed555cd33dd2fa04dac415a2e38a2379de31a3081f9e555a8bd0beb62477e8dc8e63fbd05f3100b57cf9737aae5b531729b3c115971fc
-
SSDEEP
1536:yaPXjBEHHpielpzWW4mCEzFI2aQx6GvT:/PX5elpzGmCS5xx6Y
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3040 4852 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\fdefa2fd39f7f6d4412feccb13c06151f73f221549b4fa575ac1e4f6beab7545.exe"C:\Users\Admin\AppData\Local\Temp\fdefa2fd39f7f6d4412feccb13c06151f73f221549b4fa575ac1e4f6beab7545.exe"1⤵PID:4852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4852 -s 2322⤵
- Program crash
PID:3040
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4852 -ip 48521⤵PID:3880