Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 09:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cd572717497c15fd1ebff0394bd99754d3a55841d865175905c7a9643b7e2de1.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
cd572717497c15fd1ebff0394bd99754d3a55841d865175905c7a9643b7e2de1.dll
-
Size
1.2MB
-
MD5
6c041e2742115cf7d5a03c06fb3bf721
-
SHA1
e4fd3c62d99b1406329ccc30f868274c873263f2
-
SHA256
cd572717497c15fd1ebff0394bd99754d3a55841d865175905c7a9643b7e2de1
-
SHA512
decbfae32616fbe0d14f1694938eacb56743db5cb06b6325318611fd007224f27861a9ae37aaefad165fa7ee77ea5a7b6188c7ed9e1ec63c77c623e7de420b18
-
SSDEEP
24576:3e7b256IJI5tQO48+LnlOSN9QlIlnxXpcmL4fyYzJ9T:mhoP8+ZOS7lnxXC3d
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5076 2900 WerFault.exe 34
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cd572717497c15fd1ebff0394bd99754d3a55841d865175905c7a9643b7e2de1.dll,#11⤵PID:2900
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2900 -s 3282⤵
- Program crash
PID:5076
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2900 -ip 29001⤵PID:4152