Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
182s -
max time network
224s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 08:32
Static task
static1
Behavioral task
behavioral1
Sample
b63f130bb42d0fb68d536c5278fe522c892b428ecc45b06ecdb91c8a062e3509.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b63f130bb42d0fb68d536c5278fe522c892b428ecc45b06ecdb91c8a062e3509.exe
Resource
win10v2004-20221111-en
General
-
Target
b63f130bb42d0fb68d536c5278fe522c892b428ecc45b06ecdb91c8a062e3509.exe
-
Size
24KB
-
MD5
31e7c8eb6acb8a522098d4dec88285c9
-
SHA1
2b0223498564e4c8c11214e5a201d1bbada5d3df
-
SHA256
b63f130bb42d0fb68d536c5278fe522c892b428ecc45b06ecdb91c8a062e3509
-
SHA512
a53f8835411d17048d8fffdb73e12f01d4fe670b2e48d64828f08f5417a7556fb1ebecd3694824ba5a3a94dae19f81a558fa739f7d4ba6cab72f00ef6bfb44a0
-
SSDEEP
384:mpo/HQGptXCt1QMMMMMMMMMMMN88888Qb8O0:yoYUy1QMMMMMMMMMMMN88888Q/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4472 4688 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b63f130bb42d0fb68d536c5278fe522c892b428ecc45b06ecdb91c8a062e3509.exe"C:\Users\Admin\AppData\Local\Temp\b63f130bb42d0fb68d536c5278fe522c892b428ecc45b06ecdb91c8a062e3509.exe"1⤵PID:4688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4688 -s 2402⤵
- Program crash
PID:4472
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4688 -ip 46881⤵PID:3840