Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 02:29
Static task
static1
Behavioral task
behavioral1
Sample
fcaab17d566ebf9749d872e0f0a6d093876cc6694bbdb77893ed7b2a7446b00d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fcaab17d566ebf9749d872e0f0a6d093876cc6694bbdb77893ed7b2a7446b00d.exe
Resource
win10v2004-20220812-en
General
-
Target
fcaab17d566ebf9749d872e0f0a6d093876cc6694bbdb77893ed7b2a7446b00d.exe
-
Size
112KB
-
MD5
e67647087f4cd9ec9905392403f944fc
-
SHA1
8a9e38b57e63520566fc612ae3f129f004a6eef9
-
SHA256
fcaab17d566ebf9749d872e0f0a6d093876cc6694bbdb77893ed7b2a7446b00d
-
SHA512
45816f28377567f86cc5f41e257c60885c08981ec77e0d502e22c7476194dd000b10829354a0f53e419bad63c8a2073adec9bc1ac71b9c15e92098c3fc6f4e2a
-
SSDEEP
3072:s8Zc0haH53F/y0nzTd6UjIWVvn+o+OCU:w0qXzxHhv8O9
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4800 1116 WerFault.exe 80 1320 1116 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcaab17d566ebf9749d872e0f0a6d093876cc6694bbdb77893ed7b2a7446b00d.exe"C:\Users\Admin\AppData\Local\Temp\fcaab17d566ebf9749d872e0f0a6d093876cc6694bbdb77893ed7b2a7446b00d.exe"1⤵PID:1116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1116 -s 5042⤵
- Program crash
PID:4800
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1116 -s 5082⤵
- Program crash
PID:1320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1116 -ip 11161⤵PID:4932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 1116 -ip 11161⤵PID:3596