Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
82s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 06:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3f94f41f13f7eab6ddc54f9b1687ae42b3227376cf92977c57d6edc6f4b88d4d.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
3f94f41f13f7eab6ddc54f9b1687ae42b3227376cf92977c57d6edc6f4b88d4d.dll
-
Size
1.2MB
-
MD5
fd7dc8ea3333ad9db750b62ffed0bc3a
-
SHA1
16c6f8f7f96b2f6ee866c0eceb7d04e454eecccd
-
SHA256
3f94f41f13f7eab6ddc54f9b1687ae42b3227376cf92977c57d6edc6f4b88d4d
-
SHA512
012b0dd711136b631cfb82b04e02780bdb3290dfe5be729782b27d3c9f48f2749a738360a6b7763ddc8e9a5cbc1792b0e81e7f0d7067690d8caeefc0fac4a260
-
SSDEEP
24576:6nHJvLALXKgAosOT+MevrxfrtxvcZR3LpCS90KVjGaMOLLMO49KxZ:20K/TfrK9RT0NA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4552 4932 WerFault.exe 75
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3f94f41f13f7eab6ddc54f9b1687ae42b3227376cf92977c57d6edc6f4b88d4d.dll,#11⤵PID:4932
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4932 -s 3282⤵
- Program crash
PID:4552
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 468 -p 4932 -ip 49321⤵PID:1668