Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
313s -
max time network
381s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
07/12/2022, 02:32
Static task
static1
Behavioral task
behavioral1
Sample
a70273dd4b16f3af79044c0a13d10bb095db4becb338614670fcf08e01666630.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a70273dd4b16f3af79044c0a13d10bb095db4becb338614670fcf08e01666630.exe
Resource
win10v2004-20221111-en
General
-
Target
a70273dd4b16f3af79044c0a13d10bb095db4becb338614670fcf08e01666630.exe
-
Size
214KB
-
MD5
6255498ce865b8e0e194e280f733dc03
-
SHA1
3a5ac498e4b9163c6bb4b937c4d79b23c9cf56d0
-
SHA256
a70273dd4b16f3af79044c0a13d10bb095db4becb338614670fcf08e01666630
-
SHA512
193c6ec47d7369843c8d499f5d67d97b4f8723df0849295ac843e202370f0371b2fb0cce609b32c8303a086e2ebe22e70c8b55860b504e7f1fa037c28f70fb60
-
SSDEEP
6144:hDsYzKR9Z9iI1BjuInIO4YKQx1kEapmdKF9:NsgE9Z31puInIspXkEapc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3308 3300 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\a70273dd4b16f3af79044c0a13d10bb095db4becb338614670fcf08e01666630.exe"C:\Users\Admin\AppData\Local\Temp\a70273dd4b16f3af79044c0a13d10bb095db4becb338614670fcf08e01666630.exe"1⤵PID:3300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3300 -s 2242⤵
- Program crash
PID:3308
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3300 -ip 33001⤵PID:1268