Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 10:14
Static task
static1
Behavioral task
behavioral1
Sample
f4f7fab47f9ba1b1c51ada23fe2ef64be0dcf4be202f0abe17250f99b013d8be.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f4f7fab47f9ba1b1c51ada23fe2ef64be0dcf4be202f0abe17250f99b013d8be.exe
Resource
win10v2004-20230915-en
General
-
Target
f4f7fab47f9ba1b1c51ada23fe2ef64be0dcf4be202f0abe17250f99b013d8be.exe
-
Size
33KB
-
MD5
3bfc5bf075bf39ce0c34bd85530b7cd5
-
SHA1
d5a482d4e2b57422d469acbda2e975b46981c5c0
-
SHA256
f4f7fab47f9ba1b1c51ada23fe2ef64be0dcf4be202f0abe17250f99b013d8be
-
SHA512
644a6d6e1eb291e677892df2f27e361baa8c9746883fc765294ae842fef714729b44cf427b9a6efd087a003642992167a35f4a9ec392fecb8bf3c6b4727d90a4
-
SSDEEP
768:iMsSsRoOVlgbMQXUYUho/1/sVNUK4mJChLIQ4VwQqC:izScXgoQXUYUh+RsVNUKJJqLIQ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2760 1256 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\f4f7fab47f9ba1b1c51ada23fe2ef64be0dcf4be202f0abe17250f99b013d8be.exe"C:\Users\Admin\AppData\Local\Temp\f4f7fab47f9ba1b1c51ada23fe2ef64be0dcf4be202f0abe17250f99b013d8be.exe"1⤵PID:1256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1256 -s 5202⤵
- Program crash
PID:2760
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1256 -ip 12561⤵PID:1160