Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
101s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
09/05/2024, 23:50
Static task
static1
Behavioral task
behavioral1
Sample
c2ccab644d23f69e982b73d64a4e61fc511220dea2e26f2670a8b51e9dd5ce79.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
c2ccab644d23f69e982b73d64a4e61fc511220dea2e26f2670a8b51e9dd5ce79.exe
Resource
win11-20240419-en
General
-
Target
c2ccab644d23f69e982b73d64a4e61fc511220dea2e26f2670a8b51e9dd5ce79.exe
-
Size
336KB
-
MD5
6cacf1262591bf7eb7c5882d47a1c8a8
-
SHA1
8b408664bd2be6290d80ec989c5302f69a438904
-
SHA256
c2ccab644d23f69e982b73d64a4e61fc511220dea2e26f2670a8b51e9dd5ce79
-
SHA512
5c66d3e63975f756de19d225c11303cdc2c904f1c90e1a4c55c68fb684c3970017859062a3893ca4317a4ac45cbda682561fd56f7345faa025d72f2e201888bd
-
SSDEEP
6144:D9xUJMly+CyCp03cGyepJZgl446611N23UO:D9Blyza3cpL4u
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4540 4748 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\c2ccab644d23f69e982b73d64a4e61fc511220dea2e26f2670a8b51e9dd5ce79.exe"C:\Users\Admin\AppData\Local\Temp\c2ccab644d23f69e982b73d64a4e61fc511220dea2e26f2670a8b51e9dd5ce79.exe"1⤵PID:4748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4748 -s 12762⤵
- Program crash
PID:4540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4748 -ip 47481⤵PID:2872