Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2024, 08:21
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_497b3e4590dca4ce7bda96f85bcfb121_cerber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_497b3e4590dca4ce7bda96f85bcfb121_cerber.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-22_497b3e4590dca4ce7bda96f85bcfb121_cerber.exe
-
Size
183KB
-
MD5
497b3e4590dca4ce7bda96f85bcfb121
-
SHA1
2562fd9026f8372e312252b3e93fa09377a0e4be
-
SHA256
592f21edfe1a2192e0fe662a5077458660f55e61d3cdcba0eeebe2e3a44be96c
-
SHA512
64aa3758d8167af90f9b43dc57ee6245cd351831e2ae1b6f0124cf5a0c80a129d69107807a6caf21d10bef797ef64d00c9928736639cf4b4bfcbc963d57a71d1
-
SSDEEP
3072:uWakdSXyefzv3S9G7vhIYvrtUpBa+baX3EyxTyeUnRrnlCXpbFQ6gBtvBHuvuYH8:uWgikzPS90BDkBa+bS3EeylUZbFQ3BRZ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4856 1720 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-22_497b3e4590dca4ce7bda96f85bcfb121_cerber.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-22_497b3e4590dca4ce7bda96f85bcfb121_cerber.exe"1⤵PID:1720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 4882⤵
- Program crash
PID:4856
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1720 -ip 17201⤵PID:2904