Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 12:22
Static task
static1
Behavioral task
behavioral1
Sample
13151d325a3b1e3e5a3c083f21fe6de58d1e1304b47ee6c3ed0432b9a39b480c_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
13151d325a3b1e3e5a3c083f21fe6de58d1e1304b47ee6c3ed0432b9a39b480c_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
13151d325a3b1e3e5a3c083f21fe6de58d1e1304b47ee6c3ed0432b9a39b480c_JC.exe
-
Size
365KB
-
MD5
ee649dfca31dc24379fb2e60a9de53b5
-
SHA1
da8c55e7e3eef1da565370feb40f6b5bfe3dac0f
-
SHA256
13151d325a3b1e3e5a3c083f21fe6de58d1e1304b47ee6c3ed0432b9a39b480c
-
SHA512
f566158c053c199a7cb53f93d3a7da11c32622b68e0bcff98a5becce5a88012ab6a8cb996eef29c1f9d004f3736bd172e2a5d0ea3a55c30b6ae4fb317fc6c929
-
SSDEEP
6144:scJjEa2jicP5iOo2T8VrSd/sUAOWUloaZhTW+iwt4GcjpSZ5UnnnwY1Sa:scJbqiG59ougUyAhTW+P6GcjpS7UnnnT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3704 4292 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\13151d325a3b1e3e5a3c083f21fe6de58d1e1304b47ee6c3ed0432b9a39b480c_JC.exe"C:\Users\Admin\AppData\Local\Temp\13151d325a3b1e3e5a3c083f21fe6de58d1e1304b47ee6c3ed0432b9a39b480c_JC.exe"1⤵PID:4292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 2402⤵
- Program crash
PID:3704
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4292 -ip 42921⤵PID:4904