Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 12:29
Static task
static1
Behavioral task
behavioral1
Sample
917f465a86f6fcc64b977ae33eba962f093aa25b7e4b52a9af87d5e14201df2f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
917f465a86f6fcc64b977ae33eba962f093aa25b7e4b52a9af87d5e14201df2f.exe
Resource
win10v2004-20220812-en
General
-
Target
917f465a86f6fcc64b977ae33eba962f093aa25b7e4b52a9af87d5e14201df2f.exe
-
Size
54KB
-
MD5
d0738ef8970c368cea552b14da0c69f5
-
SHA1
7e7531ab0529a9810d8a92c57d1cca2ea625d7bc
-
SHA256
917f465a86f6fcc64b977ae33eba962f093aa25b7e4b52a9af87d5e14201df2f
-
SHA512
f8c5d10085936177eb4700905166096d7005d6eebe76f90feeb346217b6dccee2f8b0ee8fd983d446a29a37290bf998d086be66ed3eeffaf37e66ff46ee52785
-
SSDEEP
768:dYBymwvfKtmp9QqN0M+MbVWdpNui+l7Hjn+bUuD2InaY3ptngyYpamD8Wd0S:aonMcQqN0mRWUi3x2InvtngUmD8W
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 320 3500 WerFault.exe 79 3740 3500 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\917f465a86f6fcc64b977ae33eba962f093aa25b7e4b52a9af87d5e14201df2f.exe"C:\Users\Admin\AppData\Local\Temp\917f465a86f6fcc64b977ae33eba962f093aa25b7e4b52a9af87d5e14201df2f.exe"1⤵PID:3500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3500 -s 2522⤵
- Program crash
PID:320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3500 -s 2682⤵
- Program crash
PID:3740
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 3500 -ip 35001⤵PID:452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3500 -ip 35001⤵PID:4468