Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2023, 01:01
Static task
static1
Behavioral task
behavioral1
Sample
21c2f7df36e4f585c1111f6f8ec3e8e8c94afd9bccbf2a2505c020385c82c7b2.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
21c2f7df36e4f585c1111f6f8ec3e8e8c94afd9bccbf2a2505c020385c82c7b2.exe
Resource
win10v2004-20231023-en
General
-
Target
21c2f7df36e4f585c1111f6f8ec3e8e8c94afd9bccbf2a2505c020385c82c7b2.exe
-
Size
13.9MB
-
MD5
ba0b887f6337bbc30889e4661c4a941c
-
SHA1
fac4ebd50b1820288a66a7774effd6362af85997
-
SHA256
21c2f7df36e4f585c1111f6f8ec3e8e8c94afd9bccbf2a2505c020385c82c7b2
-
SHA512
7ef64a1f2708eebf61af760ec211d901988faa692df38e74faec4f55cbe37a4bb58713b781be2b1aaee15095eb767f2aa180db84ea896d6991a585bca3af78b6
-
SSDEEP
393216:90kOEE8Ybb7ZAn57M+AGVU5C+dgYfx9ss:9e7lAn5xANgGgM3ss
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 648 5060 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\21c2f7df36e4f585c1111f6f8ec3e8e8c94afd9bccbf2a2505c020385c82c7b2.exe"C:\Users\Admin\AppData\Local\Temp\21c2f7df36e4f585c1111f6f8ec3e8e8c94afd9bccbf2a2505c020385c82c7b2.exe"1⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 6202⤵
- Program crash
PID:648
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5060 -ip 50601⤵PID:1248