Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 05:59
Static task
static1
Behavioral task
behavioral1
Sample
c981c167fd02cc0bd4a21b09d9646a6c9c3335d3ca278216d5d5df46c25b68e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c981c167fd02cc0bd4a21b09d9646a6c9c3335d3ca278216d5d5df46c25b68e9.exe
Resource
win10v2004-20220812-en
General
-
Target
c981c167fd02cc0bd4a21b09d9646a6c9c3335d3ca278216d5d5df46c25b68e9.exe
-
Size
294KB
-
MD5
02e0073193553f60a2d9885e17885054
-
SHA1
abf4c4f95dee894bf6e819ded6b5137f1a6cdfe6
-
SHA256
c981c167fd02cc0bd4a21b09d9646a6c9c3335d3ca278216d5d5df46c25b68e9
-
SHA512
d83746b0468e6814364439d17d404fe808f672a3000b3bb50bac242cc9dcbc9f2d01b9335e460b45b3c7b16ec4f8d27ff2ec17059ecca5c5ed5bc4bee6f67f7b
-
SSDEEP
6144:DGNFQwRmv8FtzNdZ2kCytdLB68NhSyptLdQyXWR80IczRH6:DGNFQwU8Ftrn7rBLNhuyXWRVIczU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1744 680 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c981c167fd02cc0bd4a21b09d9646a6c9c3335d3ca278216d5d5df46c25b68e9.exe"C:\Users\Admin\AppData\Local\Temp\c981c167fd02cc0bd4a21b09d9646a6c9c3335d3ca278216d5d5df46c25b68e9.exe"1⤵PID:680
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 680 -s 4842⤵
- Program crash
PID:1744
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 680 -ip 6801⤵PID:1652