Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 20:33
Static task
static1
Behavioral task
behavioral1
Sample
8ada5a91bd369a1833994f1c8064fe1b47033be7ff443344ac47206fceba216c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ada5a91bd369a1833994f1c8064fe1b47033be7ff443344ac47206fceba216c.exe
Resource
win10v2004-20240226-en
General
-
Target
8ada5a91bd369a1833994f1c8064fe1b47033be7ff443344ac47206fceba216c.exe
-
Size
2.8MB
-
MD5
570e60c91da2782ef3e301fe0fe13a49
-
SHA1
b4dd2de6e9d0b87afa20ad9bc38f42a2a25cd40b
-
SHA256
8ada5a91bd369a1833994f1c8064fe1b47033be7ff443344ac47206fceba216c
-
SHA512
56bb023a6b7b4ba9590cc62c9916af9e79c53e529539e822b7cdd630b8f41c22cf3b2aa7c59500cb7699d77c4ef35a64cb4a04c073cc59fd5b2850ee77e7cb35
-
SSDEEP
49152:CUs4vWbQe5QZuTtS0rQMYOQ+q8CE1jSn6ri+jStG9KFeMS:Hs4O5WsM0r1QnAOdG0Fen
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5012 2564 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ada5a91bd369a1833994f1c8064fe1b47033be7ff443344ac47206fceba216c.exe"C:\Users\Admin\AppData\Local\Temp\8ada5a91bd369a1833994f1c8064fe1b47033be7ff443344ac47206fceba216c.exe"1⤵PID:2564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2564 -s 4162⤵
- Program crash
PID:5012
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2564 -ip 25641⤵PID:3628