Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 15:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
75aa92a0d4f29b01ae6892d505df75b7706aca1a477d9f31ee120c86c3441cc4.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
75aa92a0d4f29b01ae6892d505df75b7706aca1a477d9f31ee120c86c3441cc4.dll
-
Size
1.2MB
-
MD5
fbc2c29c3561793734ff05e4bc380e7e
-
SHA1
6f993beb73afd07e124ebf5520aa395e81819926
-
SHA256
75aa92a0d4f29b01ae6892d505df75b7706aca1a477d9f31ee120c86c3441cc4
-
SHA512
83536a00978a5ccb93b0597a697b63ea2a8f07422c0dde0c43b4e0a1073e6eca63bfcda5d71105b958c042da49462295d3d88b31832ea3ce31a3545c26c54dd0
-
SSDEEP
24576:rRVKL5uAztHwZpU3Hr9gHg+Rin685cYjsUwJAHGB0KMyDxUBeu5/j:eYj23H54g+KjsUwJ0jKMyy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2016 3772 WerFault.exe 60
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\75aa92a0d4f29b01ae6892d505df75b7706aca1a477d9f31ee120c86c3441cc4.dll,#11⤵PID:3772
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3772 -s 3282⤵
- Program crash
PID:2016
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 3772 -ip 37721⤵PID:4660