Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system -
submitted
02/07/2023, 19:21
Static task
static1
Behavioral task
behavioral1
Sample
Malicious_57a70eb9a6d2125c561330ca435a4b6ba2b136ead63d6081fd46901224a49582.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_57a70eb9a6d2125c561330ca435a4b6ba2b136ead63d6081fd46901224a49582.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_57a70eb9a6d2125c561330ca435a4b6ba2b136ead63d6081fd46901224a49582.exe
-
Size
96KB
-
MD5
a11cb09a69776c5db63ba0c757b6cf64
-
SHA1
b1706f476fad8c45b4373cf0bcc9c17e5f3398c0
-
SHA256
57a70eb9a6d2125c561330ca435a4b6ba2b136ead63d6081fd46901224a49582
-
SHA512
37e107682912444f0561b78d7e55b41b36911bf205fc8023213ceb7e2b5e1bd81f7a8b4d97b240825a3ab7d5e2f3945377f17c98c349ca786083f5301212df2b
-
SSDEEP
1536:CLFdHG4vPhTDujjtX/9zldzIIBwxCs3Acam4Q+K7kEwh1I5w/j8/TGi4eER45VEX:CLOZVJNIIBwx604uGIIj8/1/VVlHl3GN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1360 3864 WerFault.exe 41
Processes
-
C:\Users\Admin\AppData\Local\Temp\Malicious_57a70eb9a6d2125c561330ca435a4b6ba2b136ead63d6081fd46901224a49582.exe"C:\Users\Admin\AppData\Local\Temp\Malicious_57a70eb9a6d2125c561330ca435a4b6ba2b136ead63d6081fd46901224a49582.exe"1⤵PID:3864
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3864 -s 7402⤵
- Program crash
PID:1360
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 448 -p 3864 -ip 38641⤵PID:1520