Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1025b5b5de68...8d.exe
windows7-x64
125b5b5de68...8d.exe
windows10-2004-x64
147b9dad239...5e.exe
windows7-x64
347b9dad239...5e.exe
windows10-2004-x64
355f94b2a4b...a1.exe
windows7-x64
155f94b2a4b...a1.exe
windows10-2004-x64
37cd22ca3d0...05.exe
windows7-x64
37cd22ca3d0...05.exe
windows10-2004-x64
388bbd0f57e...ec.exe
windows7-x64
188bbd0f57e...ec.exe
windows10-2004-x64
38f44d889a1...3b.exe
windows7-x64
18f44d889a1...3b.exe
windows10-2004-x64
39d7b26554a...16.exe
windows7-x64
19d7b26554a...16.exe
windows10-2004-x64
3d3e16557e8...1a.exe
windows7-x64
3d3e16557e8...1a.exe
windows10-2004-x64
3ea6ec9be3a...54.exe
windows7-x64
1ea6ec9be3a...54.exe
windows10-2004-x64
1ed73681370...6b.exe
windows7-x64
3ed73681370...6b.exe
windows10-2004-x64
3Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 07:47
Behavioral task
behavioral1
Sample
25b5b5de68e9e2695ec6979f0f3ec9f188245870a9fa979b31de039bdd19958d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
25b5b5de68e9e2695ec6979f0f3ec9f188245870a9fa979b31de039bdd19958d.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
47b9dad239cf3c013c33a9a11c226380ce116ab648e4656a8ee6ece9c5de975e.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
47b9dad239cf3c013c33a9a11c226380ce116ab648e4656a8ee6ece9c5de975e.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
55f94b2a4b51aed5b8cbd11fcf00431511dc2b94992419aa9c43e480f4308ea1.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
55f94b2a4b51aed5b8cbd11fcf00431511dc2b94992419aa9c43e480f4308ea1.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
7cd22ca3d077e3422a5677452795d9024e3eb23dd700aebd83092d651dc98b05.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
7cd22ca3d077e3422a5677452795d9024e3eb23dd700aebd83092d651dc98b05.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
ea6ec9be3aea67056e4564a9b3ce8d6e92eda54db32e710043de98d7d65ffd54.exe
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
ea6ec9be3aea67056e4564a9b3ce8d6e92eda54db32e710043de98d7d65ffd54.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
ed73681370e545e14bde32a792d1a1937acb9b83958c5c5e8b1451b55a2d7d6b.exe
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
ed73681370e545e14bde32a792d1a1937acb9b83958c5c5e8b1451b55a2d7d6b.exe
Resource
win10v2004-20230915-en
General
-
Target
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
-
Size
483KB
-
MD5
5bdb6d9df7e6dbec52883d8826577b7b
-
SHA1
9a24d9d1a2b31ac96752764060c5f6cede404348
-
SHA256
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec
-
SHA512
d05bb893beacfdeda151fb0ca6b07e03cde16d41546ab2235f3ad22dfcf94973fe5354d96c9d7029af50342323baf180f079c7ce44f6059373d46be893335c01
-
SSDEEP
12288:c6kuRbbchsnLejxs2VmNDI0JZOQloMUWSNi:cUxnLeJVmNDI0WFMUo
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3852 4952 WerFault.exe 84 4308 4952 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe"C:\Users\Admin\AppData\Local\Temp\88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe"1⤵PID:4952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 2202⤵
- Program crash
PID:3852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4952 -s 2282⤵
- Program crash
PID:4308
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4952 -ip 49521⤵PID:2924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 4952 -ip 49521⤵PID:3240