Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2023, 02:15
Static task
static1
Behavioral task
behavioral1
Sample
c16bf77fcc5c44599d6498330322817771cc351c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c16bf77fcc5c44599d6498330322817771cc351c.exe
Resource
win10v2004-20221111-en
General
-
Target
c16bf77fcc5c44599d6498330322817771cc351c.exe
-
Size
393KB
-
MD5
352e7453f1dfb7af3d26702bf6717f6f
-
SHA1
c16bf77fcc5c44599d6498330322817771cc351c
-
SHA256
8234e9a2c8f6261ad19fcd2e44aeb1abcfc193b47a82e6ce3c8b325e82057a99
-
SHA512
f0900cc289ce1381694cad3b5121704de0fb77d705b4bb75d221f14039493cafa9bdefd018757727661a8d73158d3946a856b34ffc77fc6654d3699d49f37712
-
SSDEEP
6144:pMwPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:pv8RBmmgbGMF33SU+tDRqhG6/U8aKFu
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1320 2072 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c16bf77fcc5c44599d6498330322817771cc351c.exe"C:\Users\Admin\AppData\Local\Temp\c16bf77fcc5c44599d6498330322817771cc351c.exe"1⤵PID:2072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2072 -s 3682⤵
- Program crash
PID:1320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2072 -ip 20721⤵PID:3196