Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10985196a6ca...88.exe
windows7-x64
3985196a6ca...88.exe
windows10-2004-x64
3ca7bca7285...84.exe
windows7-x64
1ca7bca7285...84.exe
windows10-2004-x64
3e8c962d87f...8c.exe
windows7-x64
3e8c962d87f...8c.exe
windows10-2004-x64
3f8b04b38e2...22.exe
windows7-x64
3f8b04b38e2...22.exe
windows10-2004-x64
3Analysis
-
max time kernel
221s -
max time network
265s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 07:47
Behavioral task
behavioral1
Sample
985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
e8c962d87fc05c1dadc2db822ef174c73f02754271f563a5e1e83d0ebd08528c.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
e8c962d87fc05c1dadc2db822ef174c73f02754271f563a5e1e83d0ebd08528c.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
f8b04b38e2c941657114b67a47aee8993a3f0d7e080eeb31fb681bf360546722.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
f8b04b38e2c941657114b67a47aee8993a3f0d7e080eeb31fb681bf360546722.exe
Resource
win10v2004-20230915-en
General
-
Target
ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe
-
Size
386KB
-
MD5
33e2f99992135f8ae5a10fa4c92f4a10
-
SHA1
74a650e2ccf231de9a1f88fe0f6b4c148c9001e8
-
SHA256
ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284
-
SHA512
57a0f06d7494e74aa6e1fa89b942bf9cfab2627bd26f9d053251e898e2165bca70d3935aa635e6eee6cb933ef308b26fb18c182bbb9e1855670e755577808cfb
-
SSDEEP
12288:QXsuCRM+4ouAkiw5bMLWHedB5iSiBzuk:QXsX8iwtMKaeSi
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3200 4816 WerFault.exe 50 2496 4816 WerFault.exe 50
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe"C:\Users\Admin\AppData\Local\Temp\ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe"1⤵PID:4816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4816 -s 2202⤵
- Program crash
PID:3200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4816 -s 2282⤵
- Program crash
PID:2496
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4816 -ip 48161⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4816 -ip 48161⤵PID:2560