Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
316s -
max time network
401s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 20:50
Static task
static1
Behavioral task
behavioral1
Sample
bfb3a0598ad77fb815a72541cb8e9b8f7c1d1a6a8e9a5ca2014b1e8c7bf38e6c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bfb3a0598ad77fb815a72541cb8e9b8f7c1d1a6a8e9a5ca2014b1e8c7bf38e6c.exe
Resource
win10v2004-20221111-en
General
-
Target
bfb3a0598ad77fb815a72541cb8e9b8f7c1d1a6a8e9a5ca2014b1e8c7bf38e6c.exe
-
Size
290KB
-
MD5
8e2133c3c95533fb707841a90556bfaf
-
SHA1
57d4f1d91f7b650376f1846b78af49888a12dda4
-
SHA256
bfb3a0598ad77fb815a72541cb8e9b8f7c1d1a6a8e9a5ca2014b1e8c7bf38e6c
-
SHA512
443ac52587a2bd15aa502d436c4e52c1037011d8c68d485ad82eebcf9fc3f545dd3a9d389d0ca1940d339d5d680b4e4adf280dca24efc0f8393b9e3b8bbee201
-
SSDEEP
6144:POyTTfrfy9hVZQC2yWwbydILkg515/2hQXye3SO0qc/FteaeU7PYCIWOdzW0:POyTTj69OTyWKLzbJCyB0T/FBeU7PFI3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1636 3756 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\bfb3a0598ad77fb815a72541cb8e9b8f7c1d1a6a8e9a5ca2014b1e8c7bf38e6c.exe"C:\Users\Admin\AppData\Local\Temp\bfb3a0598ad77fb815a72541cb8e9b8f7c1d1a6a8e9a5ca2014b1e8c7bf38e6c.exe"1⤵PID:3756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3756 -s 4442⤵
- Program crash
PID:1636
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3756 -ip 37561⤵PID:3740