Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 12:22
Static task
static1
Behavioral task
behavioral1
Sample
92941658d8681bb7b1984a790a49225aae2d903457d72f97b1c5845c9608e565.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
92941658d8681bb7b1984a790a49225aae2d903457d72f97b1c5845c9608e565.exe
Resource
win10v2004-20220901-en
General
-
Target
92941658d8681bb7b1984a790a49225aae2d903457d72f97b1c5845c9608e565.exe
-
Size
442KB
-
MD5
1cc37237e2160ce57babcf0adb2b16fb
-
SHA1
6a638187d72eb3ff4eaa04666081e238d3684c5d
-
SHA256
92941658d8681bb7b1984a790a49225aae2d903457d72f97b1c5845c9608e565
-
SHA512
d366817e70d221b570578979cadc1ce8c7d4555f94ba343fb5ec0a48d025123ff94b76934925fae92887461b0e03b3b3463f8f161c3678e2ebfad81d7d3ede0f
-
SSDEEP
12288:ytaiZ8rv4zOBqvWJt6gILwBi7u8Fjhoj+NDyJCh:OaiZ/UBi99W+Dyi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4896 4344 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\92941658d8681bb7b1984a790a49225aae2d903457d72f97b1c5845c9608e565.exe"C:\Users\Admin\AppData\Local\Temp\92941658d8681bb7b1984a790a49225aae2d903457d72f97b1c5845c9608e565.exe"1⤵PID:4344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 5642⤵
- Program crash
PID:4896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4344 -ip 43441⤵PID:5012