Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
127s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2023, 08:40
Behavioral task
behavioral1
Sample
1784-1-0x00000000007B0000-0x00000000007FE000-memory.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1784-1-0x00000000007B0000-0x00000000007FE000-memory.dll
Resource
win10v2004-20230703-en
General
-
Target
1784-1-0x00000000007B0000-0x00000000007FE000-memory.dll
-
Size
312KB
-
MD5
dbcc8a5d4b852a10055829e83430f29f
-
SHA1
8a4a7473a4657f5bc61827da818ab79421fc0f92
-
SHA256
206e78bee766a297dea4f6fcf55fde0f7a34f7d90e0bb075a8610d968fc5f017
-
SHA512
dd9be65bb1bcac3efd8113ac8094ef2df96e7bd8f323d44427838867f9b4f8a259f251890cc444a6a6a1250e3124802b3ce7ed2dee04206cfe7da0c85c021ccc
-
SSDEEP
3072:ksYckn3Xzq4IDwSK2Mbn/gprBJwJNJsCwQTIfXouPruOOTR3OoJZcYJSrCobB:ksYwjwIGIprBJweGTIDjhOTR3RcQq
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2972 3268 WerFault.exe 59
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1784-1-0x00000000007B0000-0x00000000007FE000-memory.dll,#11⤵PID:3268
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3268 -s 2402⤵
- Program crash
PID:2972
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 3268 -ip 32681⤵PID:3192