Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/05/2024, 20:45
Static task
static1
Behavioral task
behavioral1
Sample
42cc9e681f55aa6d9902de4f0aade62167c32c200f7812e4124a2e4a6abd7477.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
42cc9e681f55aa6d9902de4f0aade62167c32c200f7812e4124a2e4a6abd7477.exe
Resource
win10v2004-20240508-en
General
-
Target
42cc9e681f55aa6d9902de4f0aade62167c32c200f7812e4124a2e4a6abd7477.exe
-
Size
14KB
-
MD5
5125a0ecbf27894ceb70fb09eb3dc45f
-
SHA1
f98c60eca2d17115c16c291ca49386316417f2c7
-
SHA256
42cc9e681f55aa6d9902de4f0aade62167c32c200f7812e4124a2e4a6abd7477
-
SHA512
11284628ffd807d30a231e28fdc11ab60ae84fb0fa7861890cd270bf602c3f323276f4582f4f1b9edb5ef73cc95f41cb1d6daef212677a432479da2a071be85d
-
SSDEEP
384:yr4XZYgqt06+xiT4DROiGvMDE045HcrJJJ:yUplQ0Js4DROzeAa
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1852 5076 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\42cc9e681f55aa6d9902de4f0aade62167c32c200f7812e4124a2e4a6abd7477.exe"C:\Users\Admin\AppData\Local\Temp\42cc9e681f55aa6d9902de4f0aade62167c32c200f7812e4124a2e4a6abd7477.exe"1⤵PID:5076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5076 -s 2122⤵
- Program crash
PID:1852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5076 -ip 50761⤵PID:4644