Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 18:20
Static task
static1
Behavioral task
behavioral1
Sample
9e806c59c4394eaf4ef7f871a9769f96f6de438732a51708adb76afe12353dbb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e806c59c4394eaf4ef7f871a9769f96f6de438732a51708adb76afe12353dbb.exe
Resource
win10v2004-20220812-en
General
-
Target
9e806c59c4394eaf4ef7f871a9769f96f6de438732a51708adb76afe12353dbb.exe
-
Size
277KB
-
MD5
1f4d2227516173b2b0eb07c21c3bf784
-
SHA1
f06caf152a7a3844128f0d3efdbfcd1b7bda361e
-
SHA256
9e806c59c4394eaf4ef7f871a9769f96f6de438732a51708adb76afe12353dbb
-
SHA512
132f1b3e67027bf3c31d2fe9368241fccb480b998e5c6ddbd64feee26b66fc0617868f19e7e33a77eaf15dcdfe6a1a49d979f86f57034f5a8639b64456a26154
-
SSDEEP
6144:99T+wRe0gK+HVDvQJe46VhigyUN6aRmNzuXgK+:9h+wz0VQssUNizpT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2192 4996 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\9e806c59c4394eaf4ef7f871a9769f96f6de438732a51708adb76afe12353dbb.exe"C:\Users\Admin\AppData\Local\Temp\9e806c59c4394eaf4ef7f871a9769f96f6de438732a51708adb76afe12353dbb.exe"1⤵PID:4996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 4682⤵
- Program crash
PID:2192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4996 -ip 49961⤵PID:2176