Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2023, 08:29
Behavioral task
behavioral1
Sample
8fb2677e4ca16467c1024e6dbc09c848fa69cc721f291a4d5ecd384ad3c43a6e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8fb2677e4ca16467c1024e6dbc09c848fa69cc721f291a4d5ecd384ad3c43a6e.exe
Resource
win10v2004-20230831-en
General
-
Target
8fb2677e4ca16467c1024e6dbc09c848fa69cc721f291a4d5ecd384ad3c43a6e.exe
-
Size
4.4MB
-
MD5
035afb553f508b3645c6ae622bfd46d4
-
SHA1
b3590f39062103f5e2ac7548cc11f352d1f3d4aa
-
SHA256
8fb2677e4ca16467c1024e6dbc09c848fa69cc721f291a4d5ecd384ad3c43a6e
-
SHA512
2ac944fbf59d80da21a9d2b1f3958077feefb35ff5ea2db1ac805045e4b87d3c6d95395995f8fcae12f72a619514efd7cf7a2714b0facd77846b32d4d8b6d62b
-
SSDEEP
49152:vfNgzTfg4tI2m0OnUHjX6uSrwGiPypag7oE+s8KuqGaX0ToIBAUZLYecN:2ntID0YTrwGiPykLJBAUZLdcN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3320 2512 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\8fb2677e4ca16467c1024e6dbc09c848fa69cc721f291a4d5ecd384ad3c43a6e.exe"C:\Users\Admin\AppData\Local\Temp\8fb2677e4ca16467c1024e6dbc09c848fa69cc721f291a4d5ecd384ad3c43a6e.exe"1⤵PID:2512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 2362⤵
- Program crash
PID:3320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2512 -ip 25121⤵PID:4552