Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
25/05/2023, 12:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e01b743f9330c7b9a90edd0b1cd9201e53398a5f8518be52f6f4bb0ce4e35d20.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
e01b743f9330c7b9a90edd0b1cd9201e53398a5f8518be52f6f4bb0ce4e35d20.dll
-
Size
1.2MB
-
MD5
564a820d4b231b8efd5c56276cbc6398
-
SHA1
1fefda2268c3af72d34427b20d9b1a39dfbe426b
-
SHA256
e01b743f9330c7b9a90edd0b1cd9201e53398a5f8518be52f6f4bb0ce4e35d20
-
SHA512
c9ae2139fcb8d8b2312b19562a6c8f9ae30dc70495c5f1eb49b06e89a10425748ad9c68957323d578fcecb0659caec1d514f412cb81acc6576e949ac2b1676ff
-
SSDEEP
24576:JQYHDcKDlfwLCeA6XACXS1HMq/fQhvxasfOriL5ChXsTA7Ih:pfXKXAhsmJjnhih
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4780 5048 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e01b743f9330c7b9a90edd0b1cd9201e53398a5f8518be52f6f4bb0ce4e35d20.dll,#11⤵PID:5048
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5048 -s 3282⤵
- Program crash
PID:4780
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 432 -p 5048 -ip 50481⤵PID:4984