Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
98s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
19/05/2023, 22:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0f41ce5ef866e257ac9649d6a40b1bfe8049fb5be5904037173ae5532ac25e42.dll
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
0f41ce5ef866e257ac9649d6a40b1bfe8049fb5be5904037173ae5532ac25e42.dll
-
Size
1.2MB
-
MD5
49606b929c5b5e82f8391f5b6d0808a3
-
SHA1
829006a6d71d57039289769df2d1a3ec3ccfe919
-
SHA256
0f41ce5ef866e257ac9649d6a40b1bfe8049fb5be5904037173ae5532ac25e42
-
SHA512
5f7ab88787b47c666fb2646338defb07b38c75dc3065ddd176bbe52352c7b69fdb5ec81a9f7eba38e03309fe98f171fb80f22a1c42b96008cc002a2425bc32bc
-
SSDEEP
24576:jtl0RPQ02pA6bHvn6/yzI+bdIP7P6d4SitpwqrK1AmIfGH0qh/OM/+:UGpS6RQSi56lthk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2052 4344 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0f41ce5ef866e257ac9649d6a40b1bfe8049fb5be5904037173ae5532ac25e42.dll,#11⤵PID:4344
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4344 -s 3282⤵
- Program crash
PID:2052
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 368 -p 4344 -ip 43441⤵PID:4500