Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
212s -
max time network
242s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 03:48
Static task
static1
Behavioral task
behavioral1
Sample
fa98c0f2557b92d1342ec9d9e5f096bd1e4aa7cbf8a250e5267728a941c51269.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa98c0f2557b92d1342ec9d9e5f096bd1e4aa7cbf8a250e5267728a941c51269.exe
Resource
win10v2004-20221111-en
General
-
Target
fa98c0f2557b92d1342ec9d9e5f096bd1e4aa7cbf8a250e5267728a941c51269.exe
-
Size
60KB
-
MD5
5edc7ffccb4c3adc1b806bb071ddf026
-
SHA1
d1b42459e009f1d9a4a8af5e035f0db269560a99
-
SHA256
fa98c0f2557b92d1342ec9d9e5f096bd1e4aa7cbf8a250e5267728a941c51269
-
SHA512
cb9510062bc4345c33d770cfbc90d55c9451025f538932542dcac74e4a750b185481c4886ce6ff2c9c0e5e162dc460ebb05d2542626bf5656a6ea9087eb2baba
-
SSDEEP
768:hMy63hSvQZN4LQu56PgJnmGrH4F+2PVsUPRwTRJtoFq:2SVRU4pm4tcVs9toFq
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3960 804 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa98c0f2557b92d1342ec9d9e5f096bd1e4aa7cbf8a250e5267728a941c51269.exe"C:\Users\Admin\AppData\Local\Temp\fa98c0f2557b92d1342ec9d9e5f096bd1e4aa7cbf8a250e5267728a941c51269.exe"1⤵PID:804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 804 -s 3122⤵
- Program crash
PID:3960
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 804 -ip 8041⤵PID:3620