Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1025b5b5de68...8d.exe
windows7-x64
125b5b5de68...8d.exe
windows10-2004-x64
147b9dad239...5e.exe
windows7-x64
347b9dad239...5e.exe
windows10-2004-x64
355f94b2a4b...a1.exe
windows7-x64
155f94b2a4b...a1.exe
windows10-2004-x64
37cd22ca3d0...05.exe
windows7-x64
37cd22ca3d0...05.exe
windows10-2004-x64
388bbd0f57e...ec.exe
windows7-x64
188bbd0f57e...ec.exe
windows10-2004-x64
38f44d889a1...3b.exe
windows7-x64
18f44d889a1...3b.exe
windows10-2004-x64
39d7b26554a...16.exe
windows7-x64
19d7b26554a...16.exe
windows10-2004-x64
3d3e16557e8...1a.exe
windows7-x64
3d3e16557e8...1a.exe
windows10-2004-x64
3ea6ec9be3a...54.exe
windows7-x64
1ea6ec9be3a...54.exe
windows10-2004-x64
1ed73681370...6b.exe
windows7-x64
3ed73681370...6b.exe
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 07:47
Behavioral task
behavioral1
Sample
25b5b5de68e9e2695ec6979f0f3ec9f188245870a9fa979b31de039bdd19958d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
25b5b5de68e9e2695ec6979f0f3ec9f188245870a9fa979b31de039bdd19958d.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
47b9dad239cf3c013c33a9a11c226380ce116ab648e4656a8ee6ece9c5de975e.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
47b9dad239cf3c013c33a9a11c226380ce116ab648e4656a8ee6ece9c5de975e.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
55f94b2a4b51aed5b8cbd11fcf00431511dc2b94992419aa9c43e480f4308ea1.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
55f94b2a4b51aed5b8cbd11fcf00431511dc2b94992419aa9c43e480f4308ea1.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
7cd22ca3d077e3422a5677452795d9024e3eb23dd700aebd83092d651dc98b05.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
7cd22ca3d077e3422a5677452795d9024e3eb23dd700aebd83092d651dc98b05.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
88bbd0f57e69711c2946e3c3212b95c4e8b92ef530eaa66204b322e2bc95a2ec.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
8f44d889a1ae0efd6ea86e8a6c0edf3c32aaf5164f47fcc8f77a5bbf5daa823b.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
9d7b26554a8056dcfc1e42a1643c526cbc9dc1a4e9e5c5f7d67d0e5ae5ecad16.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
ea6ec9be3aea67056e4564a9b3ce8d6e92eda54db32e710043de98d7d65ffd54.exe
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
ea6ec9be3aea67056e4564a9b3ce8d6e92eda54db32e710043de98d7d65ffd54.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
ed73681370e545e14bde32a792d1a1937acb9b83958c5c5e8b1451b55a2d7d6b.exe
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
ed73681370e545e14bde32a792d1a1937acb9b83958c5c5e8b1451b55a2d7d6b.exe
Resource
win10v2004-20230915-en
General
-
Target
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe
-
Size
512KB
-
MD5
f328364577138a9521bccf0c5dd087a8
-
SHA1
d7d56eac53d0fc397434a81669095d46d79bf9bd
-
SHA256
d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a
-
SHA512
1dc1038c8741527b2267ea318ee24028a556239ccb2b927ce364486a94bf8627792b8bbc66df5723e6de00dd4f4acf42b74016ad1d36ca51df56ed5acb48ce70
-
SSDEEP
12288:wzf7CYzZdtnVMhVdDNSupXPZRe0XlJGfk:wzfWYzZ7VMhVPSuxPj/lJ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4996 2240 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe"C:\Users\Admin\AppData\Local\Temp\d3e16557e8e06f69240005429cc7440580fa11e4064699576a18d8dcddf1701a.exe"1⤵PID:2240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 3042⤵
- Program crash
PID:4996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2240 -ip 22401⤵PID:944