Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 08:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a924a1a2c30869a21bce42954b8ca89958fde7e9919e43be87b876c801e74a2.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
6a924a1a2c30869a21bce42954b8ca89958fde7e9919e43be87b876c801e74a2.dll
-
Size
1.2MB
-
MD5
766e95fad52c8ecc6084acc5aaebd4e7
-
SHA1
a45da8228a32c9e798c7d2f162b3d4201b706a0c
-
SHA256
6a924a1a2c30869a21bce42954b8ca89958fde7e9919e43be87b876c801e74a2
-
SHA512
b63d53a07b2a6628f4ba162561a980cfdc5f7f6dd59cf3c50e016d98e6f35dfb9d3b22409d27fe28157ec240296bf0f696dce45aa2ce74549bd9bffbfb49bf3b
-
SSDEEP
24576:nbbwp9QYuu+Nj2bzGsjnI0eS2gJd1lgHzWVT5ec5jrVsKo0A:eE2RnFlgHzoTvrVsKW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2044 1196 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6a924a1a2c30869a21bce42954b8ca89958fde7e9919e43be87b876c801e74a2.dll,#11⤵PID:1196
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1196 -s 2802⤵
- Program crash
PID:2044
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 468 -p 1196 -ip 11961⤵PID:1280