Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2023, 10:18
Static task
static1
Behavioral task
behavioral1
Sample
56666869cdfa2af955faea326f98d4ab003a7fc4d78003a028c1db8128ab3ed4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
56666869cdfa2af955faea326f98d4ab003a7fc4d78003a028c1db8128ab3ed4.exe
Resource
win10v2004-20230703-en
General
-
Target
56666869cdfa2af955faea326f98d4ab003a7fc4d78003a028c1db8128ab3ed4.exe
-
Size
56KB
-
MD5
f6ffbbea19155193be3286b407cb2e10
-
SHA1
ad8b804852fdb81a9cea41ced68e4fa0f8bd35d8
-
SHA256
56666869cdfa2af955faea326f98d4ab003a7fc4d78003a028c1db8128ab3ed4
-
SHA512
48ad885f196be043850127f2af3eb2cbe592ea2894d98816e74605c34be3ce546eacce98e7f37ff55341a0227ecffb84d3988b7f478e9b410aceae274b517a4b
-
SSDEEP
1536:Z0NbtHUqT0HKC18y/+AbU9UloZOy6dt1VHzLT:ZYbt0qTfCCy/p+7Oy6dt1VHz
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2060 3228 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\56666869cdfa2af955faea326f98d4ab003a7fc4d78003a028c1db8128ab3ed4.exe"C:\Users\Admin\AppData\Local\Temp\56666869cdfa2af955faea326f98d4ab003a7fc4d78003a028c1db8128ab3ed4.exe"1⤵PID:3228
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3228 -s 17042⤵
- Program crash
PID:2060
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 3228 -ip 32281⤵PID:1956