Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
272s -
max time network
286s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 11:37
Static task
static1
Behavioral task
behavioral1
Sample
982580ac4ecbb4495206afd061438e661954682eeb2713a9bf124fb7c7c73e6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
982580ac4ecbb4495206afd061438e661954682eeb2713a9bf124fb7c7c73e6d.exe
Resource
win10v2004-20221111-en
General
-
Target
982580ac4ecbb4495206afd061438e661954682eeb2713a9bf124fb7c7c73e6d.exe
-
Size
33KB
-
MD5
81acda9b685c07bedc56794a23f3863e
-
SHA1
95de4785ee06546b2beb97f3355e9557c339f59f
-
SHA256
982580ac4ecbb4495206afd061438e661954682eeb2713a9bf124fb7c7c73e6d
-
SHA512
851ce7f97a2bf4dd8e7c048c74d7b8dd23981923b52e3374c27a71f7303f02b55dfdecad8a6ac0f4554291804169ea733ad8c09b29e214b6a0dda300986df72a
-
SSDEEP
768:LdfTIvvi3igb79urCTXXeHKSjf+S+xL9spsF7:LpIvq3jJtju1ps
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3404 456 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\982580ac4ecbb4495206afd061438e661954682eeb2713a9bf124fb7c7c73e6d.exe"C:\Users\Admin\AppData\Local\Temp\982580ac4ecbb4495206afd061438e661954682eeb2713a9bf124fb7c7c73e6d.exe"1⤵PID:456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 456 -s 2242⤵
- Program crash
PID:3404
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 456 -ip 4561⤵PID:3592