Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 02:54
Static task
static1
Behavioral task
behavioral1
Sample
daebd87b27ed982102062149b5c22639b81f7d99a03a127ee40bdd940ee898bd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
daebd87b27ed982102062149b5c22639b81f7d99a03a127ee40bdd940ee898bd.exe
Resource
win10v2004-20230915-en
General
-
Target
daebd87b27ed982102062149b5c22639b81f7d99a03a127ee40bdd940ee898bd.exe
-
Size
15.4MB
-
MD5
94cb3eb549593d3f72f64fe2b00a2625
-
SHA1
61785ae9c81f7afd194f9d945f0f58006916980d
-
SHA256
daebd87b27ed982102062149b5c22639b81f7d99a03a127ee40bdd940ee898bd
-
SHA512
6ccf6514e7e861a1754b52451f6acfcd19ceecdead4ce177cdf7ab485d8aed3c8e21f681915f2f48d91bf9b0b9c4b3a363183c23099fbd9ccdb086b7ce671058
-
SSDEEP
393216:53aR5j7J5yEO2NewgYHzvpBTn57MZjytKVDZYSXgKY4eUrNt:53avnyEO2NeuxZn5+WtKVDZYSQKLpN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2296 3600 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\daebd87b27ed982102062149b5c22639b81f7d99a03a127ee40bdd940ee898bd.exe"C:\Users\Admin\AppData\Local\Temp\daebd87b27ed982102062149b5c22639b81f7d99a03a127ee40bdd940ee898bd.exe"1⤵PID:3600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3600 -s 6202⤵
- Program crash
PID:2296
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3600 -ip 36001⤵PID:3280