Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2024, 19:39
Static task
static1
Behavioral task
behavioral1
Sample
235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
Resource
win10v2004-20240508-en
General
-
Target
235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
-
Size
184KB
-
MD5
58d7130517fc7f2bafee35d084eba98d
-
SHA1
56deb8259cffcbfd71eb46c1533b7789bbba110f
-
SHA256
235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7
-
SHA512
eb04131013c664743f3362f3513fe63a5aa710524c1b04ba52507908fb308942b48b00abae1e9cf743efa182bc119f4f0df9f5db7421f92e1ffc15685d91b072
-
SSDEEP
1536:vBZi6jZ5YnK8o5x1pgSAvvwMjM9yvBc8omddhFD2kQftHhl5hCRxzp4dn3:5DInK8offgSQdjaW2AFDg1HhlAxFin3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5008 4236 WerFault.exe 83 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4236 235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe"C:\Users\Admin\AppData\Local\Temp\235dcab57ee7958f26cf2fc347797021e7c2f403c1f957a268a159aafadea4e7.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:4236 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4236 -s 7202⤵
- Program crash
PID:5008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4236 -ip 42361⤵PID:556