Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 11:21
Static task
static1
Behavioral task
behavioral1
Sample
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe
Resource
win10v2004-20220812-en
General
-
Target
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe
-
Size
243KB
-
MD5
a2e621cb7630d1eb95839242b92d92b5
-
SHA1
6afdf66253e6cfad74ec6c308e848a9434afe490
-
SHA256
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435
-
SHA512
fbaeb2d0e933d0e7cc74dc7217f5f73f384429931e4e6bc5495bc5751f7f75f47513de2bb72faf4c813ca7678473042e64b005814a7090c68a73021916aea232
-
SSDEEP
6144:+PhHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg26:+PhgPOvb27SJm45OOizCW5N6
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 372 4556 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe"C:\Users\Admin\AppData\Local\Temp\9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe"1⤵PID:4556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4556 -s 2722⤵
- Program crash
PID:372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4556 -ip 45561⤵PID:4568