Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2023, 18:22
Static task
static1
Behavioral task
behavioral1
Sample
c80e17b0d39d12b337ef491223f63057b91bf015a9029fd143e6bb9f6632f51f.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c80e17b0d39d12b337ef491223f63057b91bf015a9029fd143e6bb9f6632f51f.dll
Resource
win10v2004-20230831-en
General
-
Target
c80e17b0d39d12b337ef491223f63057b91bf015a9029fd143e6bb9f6632f51f.dll
-
Size
13KB
-
MD5
caaf55c2c91c9539c6e3ff88354801bb
-
SHA1
660e2f59809717b7dc522e87f2468d9969a4bc0d
-
SHA256
c80e17b0d39d12b337ef491223f63057b91bf015a9029fd143e6bb9f6632f51f
-
SHA512
1895abf68a07ab4a26da3f493a8e7f9c54e2bfe7b10749e069e3f547bd44a86bbba29df731edf6c6581e1d4e10e69cbce35df50a15226fa84f23b0d604afe775
-
SSDEEP
192:Wftft4w/QjUXC6pIm5jZkP+9osfcwU/ZpYbR:mv/QgXZZkP+9o8tcp0R
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4720 4980 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c80e17b0d39d12b337ef491223f63057b91bf015a9029fd143e6bb9f6632f51f.dll,#11⤵PID:4980
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4980 -s 3322⤵
- Program crash
PID:4720
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4980 -ip 49801⤵PID:4616