Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 05:40
Static task
static1
Behavioral task
behavioral1
Sample
c345188068f9782668cbaa5ab96e709755dc9a71d3007c0b36c92ddf832b8d3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c345188068f9782668cbaa5ab96e709755dc9a71d3007c0b36c92ddf832b8d3c.exe
Resource
win10v2004-20221111-en
General
-
Target
c345188068f9782668cbaa5ab96e709755dc9a71d3007c0b36c92ddf832b8d3c.exe
-
Size
288KB
-
MD5
51ad8a661f099f67c9da952936065544
-
SHA1
629b12f3ea32b4bd4aca247527b71f5b74335cf9
-
SHA256
c345188068f9782668cbaa5ab96e709755dc9a71d3007c0b36c92ddf832b8d3c
-
SHA512
56a0471a63f2558dcc6643933b6739af7b34ae73ee040a8fdea33416e4ff015a3da0259371d3ea4c6f289c34629060ad23e0d9741d87a10362281cf2aae81581
-
SSDEEP
6144:hzi7QZJReclOa+8/iNoC8r6axpu4+pVRo8X1NL:hzsaJReclOwiWvuxVRo8ll
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4952 3980 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\c345188068f9782668cbaa5ab96e709755dc9a71d3007c0b36c92ddf832b8d3c.exe"C:\Users\Admin\AppData\Local\Temp\c345188068f9782668cbaa5ab96e709755dc9a71d3007c0b36c92ddf832b8d3c.exe"1⤵PID:3980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3980 -s 3202⤵
- Program crash
PID:4952
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3980 -ip 39801⤵PID:4400