Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 15:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e3c5a4a8ca5091afbe57843b8317e2d7164d09b04714c073c34592d740b3ee08.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
e3c5a4a8ca5091afbe57843b8317e2d7164d09b04714c073c34592d740b3ee08.dll
-
Size
1.2MB
-
MD5
7dd237c12d93260370685f8b765f1a8e
-
SHA1
5cc8776fac707d077778f95b4ca31d336c94d187
-
SHA256
e3c5a4a8ca5091afbe57843b8317e2d7164d09b04714c073c34592d740b3ee08
-
SHA512
f8bb14e23c431e07799e950c80bf3091afce84448eca32f3d0509e90358a3eadb39b52e934bcfa5eb0ecb641c8af5a1b524538a9b47c5da4afcfaf0133053356
-
SSDEEP
24576:zzO33ic+tWTgB3EMMhhe+TJ3YD7sgpfzKTKqJNHjqvHGPujdclCg8PWNrqyW+Q:mvSaIuoEKqJ5qBjdfZ7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 956 1816 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e3c5a4a8ca5091afbe57843b8317e2d7164d09b04714c073c34592d740b3ee08.dll,#11⤵PID:1816
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1816 -s 3282⤵
- Program crash
PID:956
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 360 -p 1816 -ip 18161⤵PID:2188