Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
13/02/2023, 02:39
Static task
static1
Behavioral task
behavioral1
Sample
615505ba3d23b823b53fba4e3e1eca15cb5ce5c46f5a5509c787d5a8fda20243.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
615505ba3d23b823b53fba4e3e1eca15cb5ce5c46f5a5509c787d5a8fda20243.exe
Resource
win10v2004-20220812-en
General
-
Target
615505ba3d23b823b53fba4e3e1eca15cb5ce5c46f5a5509c787d5a8fda20243.exe
-
Size
1.2MB
-
MD5
fdb34ee51d0ccec1c797a4851360b226
-
SHA1
668c21c15d1a6d13d6f804ac3aaff1b797db51de
-
SHA256
615505ba3d23b823b53fba4e3e1eca15cb5ce5c46f5a5509c787d5a8fda20243
-
SHA512
34bb477aaa48a68efe168e70e386b29d2d13e27bdcdded29a218674c6cf4f08e44e56d676e6acb3b84bb7f1b802d6e90714fb7ffa333f534dcff72c8792b3340
-
SSDEEP
12288:rAOsh7wAiAOg5hkuJeAhtZYHm3j8XKBf9k0Mz3XYMA1y4F5RfpJijtQz6SI:rAXhHsgIuNTzBa0mHMj1pJE2VI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5088 5108 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\615505ba3d23b823b53fba4e3e1eca15cb5ce5c46f5a5509c787d5a8fda20243.exe"C:\Users\Admin\AppData\Local\Temp\615505ba3d23b823b53fba4e3e1eca15cb5ce5c46f5a5509c787d5a8fda20243.exe"1⤵PID:5108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5108 -s 7682⤵
- Program crash
PID:5088
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5108 -ip 51081⤵PID:1356