Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
187s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 08:26
Static task
static1
Behavioral task
behavioral1
Sample
cb15b1a5a42331284a4afe0549762a25a7da2f9ac3278bcc24c79317215b165d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb15b1a5a42331284a4afe0549762a25a7da2f9ac3278bcc24c79317215b165d.exe
Resource
win10v2004-20221111-en
General
-
Target
cb15b1a5a42331284a4afe0549762a25a7da2f9ac3278bcc24c79317215b165d.exe
-
Size
214KB
-
MD5
829628d94188ae921b235d6819e8972d
-
SHA1
aef547057873e3c15a5e1b9877d4561130771790
-
SHA256
cb15b1a5a42331284a4afe0549762a25a7da2f9ac3278bcc24c79317215b165d
-
SHA512
653bb2d087fac83597b4ba9de9a5421d5b584d9fde0ab6765e71aa704279fb567b825653a2c09378b1cd1220a8880ed3335a3acc2a2916b7e16ee3d0c7017864
-
SSDEEP
3072:KzDuH5wAQK0gcmdPmNiwO3oBEXx7HIu77TFac33Nvv5kcZLo4t7DZqI3mLpagK6:oDuZLpmNiOEXxx/Fayy02Mgn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3108 444 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb15b1a5a42331284a4afe0549762a25a7da2f9ac3278bcc24c79317215b165d.exe"C:\Users\Admin\AppData\Local\Temp\cb15b1a5a42331284a4afe0549762a25a7da2f9ac3278bcc24c79317215b165d.exe"1⤵PID:444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 444 -s 2322⤵
- Program crash
PID:3108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 444 -ip 4441⤵PID:3228