Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
11/04/2023, 10:51
Behavioral task
behavioral1
Sample
f002baac9c55ec2edb4afb9f1236cf3271810998c8d80e013b3709180906de56.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f002baac9c55ec2edb4afb9f1236cf3271810998c8d80e013b3709180906de56.exe
Resource
win10v2004-20230221-en
General
-
Target
f002baac9c55ec2edb4afb9f1236cf3271810998c8d80e013b3709180906de56.exe
-
Size
1.7MB
-
MD5
1cb2b40a62c15a692de95a5bffc5b3df
-
SHA1
401ee060970e5916d2973f7a8cc36589347ce7ba
-
SHA256
f002baac9c55ec2edb4afb9f1236cf3271810998c8d80e013b3709180906de56
-
SHA512
ec98b711cb77306a3c5f63d3f900acb8a6a3ebe7ef71111521e87b3b7f99c4a3104790deab3792a111c2c671a5cb912bf959365dd4fba2ece0ae80fc770ff4ce
-
SSDEEP
24576:cmza9kpDDDFcn14pkU1wFT4zwB34LMqriJoXO+/D1hIDSVXT5XWPoqt6Kya:ra9aFcnukU1wezmI9R/p/XT5XlY31
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4040 4824 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\f002baac9c55ec2edb4afb9f1236cf3271810998c8d80e013b3709180906de56.exe"C:\Users\Admin\AppData\Local\Temp\f002baac9c55ec2edb4afb9f1236cf3271810998c8d80e013b3709180906de56.exe"1⤵PID:4824
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4824 -s 3922⤵
- Program crash
PID:4040
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4824 -ip 48241⤵PID:4668