Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1025b5b5de68...8d.exe
windows7-x64
125b5b5de68...8d.exe
windows10-2004-x64
147b9dad239...5e.exe
windows7-x64
347b9dad239...5e.exe
windows10-2004-x64
355f94b2a4b...a1.exe
windows7-x64
155f94b2a4b...a1.exe
windows10-2004-x64
37cd22ca3d0...05.exe
windows7-x64
37cd22ca3d0...05.exe
windows10-2004-x64
388bbd0f57e...ec.exe
windows7-x64
188bbd0f57e...ec.exe
windows10-2004-x64
38f44d889a1...3b.exe
windows7-x64
18f44d889a1...3b.exe
windows10-2004-x64
39d7b26554a...16.exe
windows7-x64
19d7b26554a...16.exe
windows10-2004-x64
3d3e16557e8...1a.exe
windows7-x64
3d3e16557e8...1a.exe
windows10-2004-x64
3ea6ec9be3a...54.exe
windows7-x64
1ea6ec9be3a...54.exe
windows10-2004-x64
1ed73681370...6b.exe
windows7-x64
3ed73681370...6b.exe
windows10-2004-x64
3Analysis
-
max time kernel
270s -
max time network
317s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 07:47
Behavioral task
behavioral1
Sample
25b5b5de68e9e2695ec6979f0f3ec9f188245870a9fa979b31de039bdd19958d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
25b5b5de68e9e2695ec6979f0f3ec9f188245870a9fa979b31de039bdd19958d.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
47b9dad239cf3c013c33a9a11c226380ce116ab648e4656a8ee6ece9c5de975e.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
47b9dad239cf3c013c33a9a11c226380ce116ab648e4656a8ee6ece9c5de975e.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
55f94b2a4b51aed5b8cbd11fcf00431511dc2b94992419aa9c43e480f4308ea1.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
55f94b2a4b51aed5b8cbd11fcf00431511dc2b94992419aa9c43e480f4308ea1.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
7cd22ca3d077e3422a5677452795d9024e3eb23dd700aebd83092d651dc98b05.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
7cd22ca3d077e3422a5677452795d9024e3eb23dd700aebd83092d651dc98b05.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
ea6ec9be3aea67056e4564a9b3ce8d6e92eda54db32e710043de98d7d65ffd54.exe
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
ea6ec9be3aea67056e4564a9b3ce8d6e92eda54db32e710043de98d7d65ffd54.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
ed73681370e545e14bde32a792d1a1937acb9b83958c5c5e8b1451b55a2d7d6b.exe
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
ed73681370e545e14bde32a792d1a1937acb9b83958c5c5e8b1451b55a2d7d6b.exe
Resource
win10v2004-20230915-en
General
-
Target
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
-
Size
483KB
-
MD5
5dcbfb3333be6528a76d8b477c47b471
-
SHA1
ed11fa3d735859951be3a23bb62aa854d4b01967
-
SHA256
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b
-
SHA512
2f20d01a444cb8e6d493519bec9eafef29f43f78ed39ec0173dbcf509dc88bd04c39b7b7c863bdb7f9ad0952fcea4ea64ece6c224eb60243c3d38a4e3aa5095a
-
SSDEEP
12288:c6kuRbbchsnLejxs2VmNDI0JZOQloMUWSNV:cUxnLeJVmNDI0WFMUn
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2812 2944 WerFault.exe 85 1724 2944 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe"C:\Users\Admin\AppData\Local\Temp\8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe"1⤵PID:2944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 2202⤵
- Program crash
PID:2812
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 2282⤵
- Program crash
PID:1724
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2944 -ip 29441⤵PID:3320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2944 -ip 29441⤵PID:1536