Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2023, 21:34
Static task
static1
Behavioral task
behavioral1
Sample
e623addf0f46a21c2a8e58a6dc680a3a4ef089afae0464bdf679bb282f4fe55b.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
e623addf0f46a21c2a8e58a6dc680a3a4ef089afae0464bdf679bb282f4fe55b.exe
Resource
win10v2004-20231023-en
General
-
Target
e623addf0f46a21c2a8e58a6dc680a3a4ef089afae0464bdf679bb282f4fe55b.exe
-
Size
8.0MB
-
MD5
c80235c0a654dcecf4ef3e5e480e533d
-
SHA1
e00ad6c688fba03140e1a772520a9c6a0fa2acee
-
SHA256
e623addf0f46a21c2a8e58a6dc680a3a4ef089afae0464bdf679bb282f4fe55b
-
SHA512
346d87c94eb8cc86a40ab47c5e892741e349c44b0f0b923d2bcbc2f8b0cfe43c72fcafa3f2f39dbace0ff2a00b8a59ff6b16a4bd81286ca2ea664a0e171058df
-
SSDEEP
196608:IrpJMyC47dJRM4sGjseyVEnELTDlDqctX:QpfdJODjEELT9q
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4428 4204 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\e623addf0f46a21c2a8e58a6dc680a3a4ef089afae0464bdf679bb282f4fe55b.exe"C:\Users\Admin\AppData\Local\Temp\e623addf0f46a21c2a8e58a6dc680a3a4ef089afae0464bdf679bb282f4fe55b.exe"1⤵PID:4204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4204 -s 5402⤵
- Program crash
PID:4428
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4204 -ip 42041⤵PID:1536