Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
52s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 01:41
Static task
static1
Behavioral task
behavioral1
Sample
a45320b3188d4f1a0b5d58f78944e1d963258c146d7dce00b8dc991584becd15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a45320b3188d4f1a0b5d58f78944e1d963258c146d7dce00b8dc991584becd15.exe
Resource
win10v2004-20220901-en
General
-
Target
a45320b3188d4f1a0b5d58f78944e1d963258c146d7dce00b8dc991584becd15.exe
-
Size
272KB
-
MD5
073ca302aec6ada7cbad0fec1e69ec40
-
SHA1
86898f99b54635c6d0960094080953a9ca0c7f95
-
SHA256
a45320b3188d4f1a0b5d58f78944e1d963258c146d7dce00b8dc991584becd15
-
SHA512
34be24aba04ef61b31e786df82022e3204c29d0670dd4fac178f6341fd796f75f9895754efd7ccfffade663c0d545f60a1b7458d443c2aa0b4f2e1308834f1c6
-
SSDEEP
6144:avHjJrfB3+powwq+xE7OqLVJ5bbZXegqw48gyH0YtnbvK/kFZj:avjJrp3JBqsEaWJtbZU8JFtrymB
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2400 1884 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\a45320b3188d4f1a0b5d58f78944e1d963258c146d7dce00b8dc991584becd15.exe"C:\Users\Admin\AppData\Local\Temp\a45320b3188d4f1a0b5d58f78944e1d963258c146d7dce00b8dc991584becd15.exe"1⤵PID:1884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 3962⤵
- Program crash
PID:2400
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1884 -ip 18841⤵PID:3284