Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
171s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 22:36
Static task
static1
Behavioral task
behavioral1
Sample
cc005bc1a3d52ff431d9c29dad76d882d3384f66dd0106a9735706883b1e6ff2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc005bc1a3d52ff431d9c29dad76d882d3384f66dd0106a9735706883b1e6ff2.exe
Resource
win10v2004-20221111-en
General
-
Target
cc005bc1a3d52ff431d9c29dad76d882d3384f66dd0106a9735706883b1e6ff2.exe
-
Size
352KB
-
MD5
50cba2c6b0da680c6359a6aaff531ca4
-
SHA1
0aa296078b31bdc2b57058f2bc0f4f22940f9369
-
SHA256
cc005bc1a3d52ff431d9c29dad76d882d3384f66dd0106a9735706883b1e6ff2
-
SHA512
f57768a266347e0935fedc16324cc18229f2f3c15b2207f73b90503e6b41facc2c4a3e9b815f023556d282fbbec34d683b152cc1ba7568fb61d1fb966c63b548
-
SSDEEP
6144:xQikDtqTxBmlP7u6I1mHHIsXGggcUW+mu2IcbQXpGGYze9NbItmJx+Ret:xEJqlB4P7xtnocUsu2IcbQXIGX9NbItI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4696 2952 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\cc005bc1a3d52ff431d9c29dad76d882d3384f66dd0106a9735706883b1e6ff2.exe"C:\Users\Admin\AppData\Local\Temp\cc005bc1a3d52ff431d9c29dad76d882d3384f66dd0106a9735706883b1e6ff2.exe"1⤵PID:2952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2952 -s 5002⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2952 -ip 29521⤵PID:1904