Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
333s -
max time network
364s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 12:02
Static task
static1
Behavioral task
behavioral1
Sample
95659010b9d6eade95a68b71a7855238caefd5e3a97abdbfa6dab7d7574a7e85.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95659010b9d6eade95a68b71a7855238caefd5e3a97abdbfa6dab7d7574a7e85.exe
Resource
win10v2004-20221111-en
General
-
Target
95659010b9d6eade95a68b71a7855238caefd5e3a97abdbfa6dab7d7574a7e85.exe
-
Size
52KB
-
MD5
aa5e7ffd0d4d1514111ac720d979536f
-
SHA1
d368d87bc2b0884387be6a4d2bd3be8c0022fea0
-
SHA256
95659010b9d6eade95a68b71a7855238caefd5e3a97abdbfa6dab7d7574a7e85
-
SHA512
dd4ceb5078beadd61bb295c665e1a585fb100c8dfae0c3f6409b368bb349163f8c499da401f18efb5562ed6f3a348916af956e2909b29d03fecda6a7a7a9a12b
-
SSDEEP
768:jFfkUKZn+JhKgFSb7l8o94G/Xk9q+3rQiF9X3pwy6GW7EM/Q4:jRknx+1SbhJ9pk9tciX+ao/n
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1944 4920 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\95659010b9d6eade95a68b71a7855238caefd5e3a97abdbfa6dab7d7574a7e85.exe"C:\Users\Admin\AppData\Local\Temp\95659010b9d6eade95a68b71a7855238caefd5e3a97abdbfa6dab7d7574a7e85.exe"1⤵PID:4920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 1642⤵
- Program crash
PID:1944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4920 -ip 49201⤵PID:488