Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2024, 21:02
Behavioral task
behavioral1
Sample
422609b9e26634a859c81b825ed33eaf0963b820e514960bf4448d8ca17efb1a.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
422609b9e26634a859c81b825ed33eaf0963b820e514960bf4448d8ca17efb1a.exe
Resource
win10v2004-20240508-en
General
-
Target
422609b9e26634a859c81b825ed33eaf0963b820e514960bf4448d8ca17efb1a.exe
-
Size
42KB
-
MD5
98955181900923ba37b332413ff00e4d
-
SHA1
aba3d2df5f48b1534d8aa76377f1a32dcb371740
-
SHA256
422609b9e26634a859c81b825ed33eaf0963b820e514960bf4448d8ca17efb1a
-
SHA512
eeb8d01daff2389be95ba64c6fe77a842c8c4ac7cb54fe43262e7b0f0e9ef42eebe0041cd193266348e327f060f0361a78f2a2d9b3a25b153e955889df7517ea
-
SSDEEP
768:BpO4Xb2E6NOSjkU6Loq5ABhGUVTnbcuyD7UN:rOqbZ6NjkbGGgnouy8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1520 3988 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\422609b9e26634a859c81b825ed33eaf0963b820e514960bf4448d8ca17efb1a.exe"C:\Users\Admin\AppData\Local\Temp\422609b9e26634a859c81b825ed33eaf0963b820e514960bf4448d8ca17efb1a.exe"1⤵PID:3988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3988 -s 2202⤵
- Program crash
PID:1520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3988 -ip 39881⤵PID:2584