Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 08:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7c1ffca46e994f2b5aa5aa9147d94b1221c9d918f6e2f840f83e9742fdeabb24.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
7c1ffca46e994f2b5aa5aa9147d94b1221c9d918f6e2f840f83e9742fdeabb24.dll
-
Size
1.2MB
-
MD5
63c7e9986cf2ec87f2dd746849f776fa
-
SHA1
eb8881091385a1aff210067da9fda77bc3037694
-
SHA256
7c1ffca46e994f2b5aa5aa9147d94b1221c9d918f6e2f840f83e9742fdeabb24
-
SHA512
f1597e83fc802aaee5e8d2277667051054d55fb6c36269ce439edf4aa4d4c9778b8ed0c70ba480fbf052643232c52914289d310d7243a61dbfeb600498bd8e7f
-
SSDEEP
24576:M/kSJKPlJI73kGeg/3Lnh/Guc8D6npAT/5F4x5us+fZ6nGpms1RNQVW4:20c2Y9zVjTox5uks1RyVD
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 396 3336 WerFault.exe 69
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7c1ffca46e994f2b5aa5aa9147d94b1221c9d918f6e2f840f83e9742fdeabb24.dll,#11⤵PID:3336
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3336 -s 3282⤵
- Program crash
PID:396
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 3336 -ip 33361⤵PID:2744