Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 07:27
Static task
static1
Behavioral task
behavioral1
Sample
afcb716f734f186c23841c8bb18581c7158f60bb1a373d217e1081fb2b9e8004.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
afcb716f734f186c23841c8bb18581c7158f60bb1a373d217e1081fb2b9e8004.exe
Resource
win10v2004-20220812-en
General
-
Target
afcb716f734f186c23841c8bb18581c7158f60bb1a373d217e1081fb2b9e8004.exe
-
Size
116KB
-
MD5
f552a0ffb24132bb9e760a4f176c435b
-
SHA1
65a9e4506a327705a5f923b97c237e9baa6dbc05
-
SHA256
afcb716f734f186c23841c8bb18581c7158f60bb1a373d217e1081fb2b9e8004
-
SHA512
d57342d54d1865c539d7e8c3c65166f229565eaeef2be633770ebe0b1d6082f3faad7a1dcf2c9fd0ed9294f61ca669add3dcb9828baa34ec8ad73dad92537857
-
SSDEEP
1536:ytsB888888888888W88888888888Bvhjn:yY888888888888W88888888888/z
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3708 1684 WerFault.exe 78 4816 1684 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\afcb716f734f186c23841c8bb18581c7158f60bb1a373d217e1081fb2b9e8004.exe"C:\Users\Admin\AppData\Local\Temp\afcb716f734f186c23841c8bb18581c7158f60bb1a373d217e1081fb2b9e8004.exe"1⤵PID:1684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 3522⤵
- Program crash
PID:3708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 3802⤵
- Program crash
PID:4816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1684 -ip 16841⤵PID:2376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1684 -ip 16841⤵PID:4900