Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15/08/2023, 08:06
Behavioral task
behavioral1
Sample
649ebdb77e89ae242f8a01c9c121373927a6b220d878ed94333e7f21ed23b52f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
649ebdb77e89ae242f8a01c9c121373927a6b220d878ed94333e7f21ed23b52f.exe
Resource
win10v2004-20230703-en
General
-
Target
649ebdb77e89ae242f8a01c9c121373927a6b220d878ed94333e7f21ed23b52f.exe
-
Size
897KB
-
MD5
ad77644c68b8dc1c637b989ce68c8aec
-
SHA1
fdb99961e075c6137e49697f574e460a9630a0b0
-
SHA256
649ebdb77e89ae242f8a01c9c121373927a6b220d878ed94333e7f21ed23b52f
-
SHA512
ef818561cbf795df3c7f88ad15fff176c2c7165f3a20d576396272d1002b7b0a6f33c775e73cd702fa1f697a12eff32dc23d459ecb09f2d3e56e7240b1945230
-
SSDEEP
6144:ebE47Qea/6ApVkCGkn9KYfw4iiWR2BNPoDY2Hhtm6+tJXPDQkrpKnQh5L/e:lYa//zGQ1fw4iiFfPdYmhXPDQq/e
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 1556 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\649ebdb77e89ae242f8a01c9c121373927a6b220d878ed94333e7f21ed23b52f.exe"C:\Users\Admin\AppData\Local\Temp\649ebdb77e89ae242f8a01c9c121373927a6b220d878ed94333e7f21ed23b52f.exe"1⤵PID:1556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 2442⤵
- Program crash
PID:5096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1556 -ip 15561⤵PID:4260