Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
100s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 07:19
Static task
static1
Behavioral task
behavioral1
Sample
bdc6f6da2fa74b57fd6ecf1c422547650d18c9ad5e4fa0ba302e908211a7c814.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bdc6f6da2fa74b57fd6ecf1c422547650d18c9ad5e4fa0ba302e908211a7c814.exe
Resource
win10v2004-20220812-en
General
-
Target
bdc6f6da2fa74b57fd6ecf1c422547650d18c9ad5e4fa0ba302e908211a7c814.exe
-
Size
13KB
-
MD5
cc59d846c3cdf6163be0797d60b8c6bb
-
SHA1
8015ce446ed457587158aafc8926528e4c42d7d1
-
SHA256
bdc6f6da2fa74b57fd6ecf1c422547650d18c9ad5e4fa0ba302e908211a7c814
-
SHA512
61f9296771cfc274e8bfeeef78937cd2c7b21634ed6159be9b1227e5f1d1b6f8f3c53abb0030b540f01c34786f88274ef86e142d66da21770717694f604d501e
-
SSDEEP
192:mfkUnf2LoqiNsdJaCr240cR4wn8pAxzh014cRYHyBI5yi7GiVoztySH:g/nf2L66r0q4UFcm8IpCieA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4408 3204 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\bdc6f6da2fa74b57fd6ecf1c422547650d18c9ad5e4fa0ba302e908211a7c814.exe"C:\Users\Admin\AppData\Local\Temp\bdc6f6da2fa74b57fd6ecf1c422547650d18c9ad5e4fa0ba302e908211a7c814.exe"1⤵PID:3204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3204 -s 2202⤵
- Program crash
PID:4408
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3204 -ip 32041⤵PID:2288