Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
198s -
max time network
202s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 05:19
Static task
static1
Behavioral task
behavioral1
Sample
ba3deb5303ef9a2586c88d11be76af8443dacbddc1b74f351dfc1f08fe77a461.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba3deb5303ef9a2586c88d11be76af8443dacbddc1b74f351dfc1f08fe77a461.exe
Resource
win10v2004-20221111-en
General
-
Target
ba3deb5303ef9a2586c88d11be76af8443dacbddc1b74f351dfc1f08fe77a461.exe
-
Size
385KB
-
MD5
ffbbea5383b8ab152fb84779340b6e7d
-
SHA1
d9eefab231cf0dbf480f95604a5c60612f1ad41f
-
SHA256
ba3deb5303ef9a2586c88d11be76af8443dacbddc1b74f351dfc1f08fe77a461
-
SHA512
5ed23c27c3531c17c98da247b6c649eb8f931a39bcf2d3fade565aa1228d8e1614d3cfdee681452cf7f630a1c9494714522c1fca2c1342a79ef7929663416e74
-
SSDEEP
6144:qGH2EqPcpCG0fJMHneMCDB6sEFu6XwydbyY9gHDtWGDSYAnLCI:q24G0fchCd+RXwycY9gkGTALb
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2448 1448 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba3deb5303ef9a2586c88d11be76af8443dacbddc1b74f351dfc1f08fe77a461.exe"C:\Users\Admin\AppData\Local\Temp\ba3deb5303ef9a2586c88d11be76af8443dacbddc1b74f351dfc1f08fe77a461.exe"1⤵PID:1448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1448 -s 5922⤵
- Program crash
PID:2448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1448 -ip 14481⤵PID:1320