Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2023, 01:23
Static task
static1
Behavioral task
behavioral1
Sample
05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4.exe
Resource
win10v2004-20231020-en
General
-
Target
05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4.exe
-
Size
836KB
-
MD5
2c953e98e873ecdaa68d6de36b19b2a9
-
SHA1
059e237e66d7f7765533e0f648579cace2f1aa2b
-
SHA256
05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4
-
SHA512
11f4223bf4f5f6e6c095c72f0440efc6662c843456a2d404a14099d9e1ea6a9427f434cb93fc567062e6da2302102e8faf620afd49eaecb06b7a6b1c8e458c2e
-
SSDEEP
12288:b/iSCVZA4DHxCtuwAi+yx6ukap/8E/ZzdFaYd:b/t4jxfy4ukayE/ZzCYd
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4540 4316 WerFault.exe 82 2620 4316 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4.exe"C:\Users\Admin\AppData\Local\Temp\05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4.exe"1⤵PID:4316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4316 -s 2242⤵
- Program crash
PID:4540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4316 -s 2242⤵
- Program crash
PID:2620
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4316 -ip 43161⤵PID:4596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 4316 -ip 43161⤵PID:2792