Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 06:29
Static task
static1
Behavioral task
behavioral1
Sample
b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51.exe
Resource
win10v2004-20220901-en
General
-
Target
b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51.exe
-
Size
172KB
-
MD5
28f7f2bc90dc745d0513ed262d35fbfb
-
SHA1
a468eb5df62bac640850770c6c904a017d86d73f
-
SHA256
b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51
-
SHA512
791b2e52a01a1cbfa77e3537b3ff2405d165b74522bb6675cb18442ed1848cfd384996a61431536480a2da26e9f6bad7dedcd5953089da944f54d1ee17569b56
-
SSDEEP
3072:wb/AhChWboSLXPlpCJLgRY1HGE/RLGK8y/h7YbN30YLWZ1+lxQH:u/DkboSzlpugRY1FJz8ylYR/6ulw
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 680 4880 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51.exe"C:\Users\Admin\AppData\Local\Temp\b81655ea9af8e4bb764729a3ba829e0616ed7c35b635be37d23ef05ae554ed51.exe"1⤵PID:4880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4880 -s 2962⤵
- Program crash
PID:680
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4880 -ip 48801⤵PID:2132