Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
154s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
16/11/2023, 22:18
Static task
static1
Behavioral task
behavioral1
Sample
9bdd24740832fb70a8befd2c973f820d05506ecfbc0cd8b0cbc2515c4dfe1199.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
9bdd24740832fb70a8befd2c973f820d05506ecfbc0cd8b0cbc2515c4dfe1199.exe
Resource
win10v2004-20231023-en
General
-
Target
9bdd24740832fb70a8befd2c973f820d05506ecfbc0cd8b0cbc2515c4dfe1199.exe
-
Size
5KB
-
MD5
9457d15305460ae31279a0243c86b33f
-
SHA1
20685cfd77c117acef4929d2bfd0b549770efccd
-
SHA256
9bdd24740832fb70a8befd2c973f820d05506ecfbc0cd8b0cbc2515c4dfe1199
-
SHA512
e5b7fe30e54ecf438bd5997a1ece61aa19eaccbf4e6c26d97f1b2eeea6c0c0e388919974a71e8f6e9a779261a256a7dc52b9eb878b59cb9d720c799819b8c78b
-
SSDEEP
48:SDNlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tyRuqSxp:kTWLkFfNnOKYloIQ2pm2pbYSWxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2764 2968 WerFault.exe 35
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bdd24740832fb70a8befd2c973f820d05506ecfbc0cd8b0cbc2515c4dfe1199.exe"C:\Users\Admin\AppData\Local\Temp\9bdd24740832fb70a8befd2c973f820d05506ecfbc0cd8b0cbc2515c4dfe1199.exe"1⤵PID:2968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2968 -s 2242⤵
- Program crash
PID:2764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2968 -ip 29681⤵PID:3028