Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 06:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6e2e93e9a76cfde8f32b1d3185eb9663a0ee6e62ae6ab55ecd3aad89bcd83c3a.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
6e2e93e9a76cfde8f32b1d3185eb9663a0ee6e62ae6ab55ecd3aad89bcd83c3a.dll
-
Size
1.2MB
-
MD5
35458923e9af61457c32e273026410da
-
SHA1
45edc467fc069eb77a62167da12ddfd85baa31b0
-
SHA256
6e2e93e9a76cfde8f32b1d3185eb9663a0ee6e62ae6ab55ecd3aad89bcd83c3a
-
SHA512
e54e1e5518405d69ecc16e22e8fafedc34c2ba6b11f3d4c5a76e3e3bd5fb30e223fa868b3861372ad7bb90ef052a8d47375bf768263fcf4fe64120711fdbd54a
-
SSDEEP
24576:eVoPU3nHLxhYhpo6Xys3ciduACgzSWZCP4GRqpmU4cC:9ioeS70EUPRq8Z/
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1636 4648 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6e2e93e9a76cfde8f32b1d3185eb9663a0ee6e62ae6ab55ecd3aad89bcd83c3a.dll,#11⤵PID:4648
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4648 -s 3282⤵
- Program crash
PID:1636
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4648 -ip 46481⤵PID:3980