Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 20:18
Static task
static1
Behavioral task
behavioral1
Sample
59bb477c4199df4f93cd8d2d6bedb3d77d694a2127e03cfbe750db5a76bdf6c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59bb477c4199df4f93cd8d2d6bedb3d77d694a2127e03cfbe750db5a76bdf6c9.exe
Resource
win10v2004-20220901-en
General
-
Target
59bb477c4199df4f93cd8d2d6bedb3d77d694a2127e03cfbe750db5a76bdf6c9.exe
-
Size
817KB
-
MD5
a1b4896186b233722275c39bcafd5889
-
SHA1
6dcf865d2712f5222884b3bf1ca82ba35da92a3c
-
SHA256
59bb477c4199df4f93cd8d2d6bedb3d77d694a2127e03cfbe750db5a76bdf6c9
-
SHA512
176fc04e6f321dac04327eeeb8138daf96e54c602d981f13729b6fb0df3e6bac4547af5c5ce47baf2299c5159d9dce48f00eb2c52f44a227a598f8a1eeb3172f
-
SSDEEP
24576:7+e3NjEnPC3V/ytBhJCitnb6v6OnEU58EH:7l3NoC38tBD9qDn18E
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4092 3404 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\59bb477c4199df4f93cd8d2d6bedb3d77d694a2127e03cfbe750db5a76bdf6c9.exe"C:\Users\Admin\AppData\Local\Temp\59bb477c4199df4f93cd8d2d6bedb3d77d694a2127e03cfbe750db5a76bdf6c9.exe"1⤵PID:3404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3404 -s 1362⤵
- Program crash
PID:4092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 3404 -ip 34041⤵PID:636